MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ddbac22b9a8b0955b57925d72e10f6a3502e55cf3284b42cb28033812ff2f668. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ddbac22b9a8b0955b57925d72e10f6a3502e55cf3284b42cb28033812ff2f668
SHA3-384 hash: 9e620da51d734725b8df21d3a411ad9acfed468d060cf236c71720ace38adbbc65cea4968a8177e3aacab58cad986ea4
SHA1 hash: bf559873b483efca7342426258665ca9152ff890
MD5 hash: eaa5cc047318ebc1ae4a0c35f62f598b
humanhash: seventeen-golf-skylark-seventeen
File name:Remittance copy.pdf.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:648'187 bytes
First seen:2021-04-05 05:52:43 UTC
Last seen:2021-04-06 04:06:54 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 12288:zN1kjtE9TtZT+hyI9OxCBvnNm9kVXayi9i/nwPCMAa6Nf9L33GBF:rkjtEZtZTI9p7maVXa1iIPaaq6F
TLSH 37D423DD88EC4952503109F18F586C91A8E72C39389A344DC294BD1D6E8AFC2E53FF5B
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
3
# of downloads :
156
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ddbac22b9a8b0955b57925d72e10f6a3502e55cf3284b42cb28033812ff2f668/
Threat name:
Win32.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2021-04-05 04:19:59 UTC
File Type:
Binary (Archive)
Extracted files:
13
AV detection:
13 of 48 (27.08%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=3w5mek42rmevlnlzexls4ehwunic4vopgkclilfsqazycl7s6zua._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/ddbac22b9a8b0955b57925d72e10f6a3502e55cf3284b42cb28033812ff2f668

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace ddbac22b9a8b0955b57925d72e10f6a3502e55cf3284b42cb28033812ff2f668

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments