MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e8d183c12deadb3188fe5218e0930d12965519b6b0897b1e9728b9c6e541732e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e8d183c12deadb3188fe5218e0930d12965519b6b0897b1e9728b9c6e541732e
SHA3-384 hash: f8f0021c6bf04121f2e85b4e1acdcbf6bcac342729bf9471fdd3c9b04724f2a7bbc9ac98c4b924a923512528cff162eb
SHA1 hash: 82b9ecd077a3b5613f822864d676aa449db785d8
MD5 hash: e7eb5fc5c4f91439faeed0c8326af225
humanhash: green-friend-december-echo
File name:Shipping Details.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:352'848 bytes
First seen:2020-11-20 08:39:18 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 6144:af2/+1QPjQUXV8+v0WI5CcEAY8w7vylKAdJoKSDLlEhjn103LI:aO1PhXV8/CcoKUDLWJ0c
TLSH 5D7423473BF4DE12A31262ACE73AA2139BF4D3D05D8218604D677CAB7C2513A83975CE
Reporter cocaman
Tags:ace AgentTesla


Avatar
cocaman
Malicious email (T1566.001)
From: ""Recipients" <info@tnt.com>" (likely spoofed)
Received: "from zoz0.205.xzov.ml (zoz0.205.xzov.ml [143.110.155.28]) "
Date: "Fri, 20 Nov 2020 00:38:40 -0800"
Subject: "TNT Consignment"
Attachment: "Shipping Details.ace"

Intelligence

File Origin
# of uploads :
1
# of downloads :
134
Origin country :
n/a
Vendor Threat Intelligence
Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e8d183c12deadb3188fe5218e0930d12965519b6b0897b1e9728b9c6e541732e/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-11-20 08:40:07 UTC
File Type:
Binary (Archive)
Extracted files:
48
AV detection:
19 of 29 (65.52%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace e8d183c12deadb3188fe5218e0930d12965519b6b0897b1e9728b9c6e541732e

(this sample)

AgentTesla

Executable exe e9db727184678995b440517776f4666a27850355f1f4185a9629d6b959b6673f

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e9db727184678995b440517776f4666a27850355f1f4185a9629d6b959b6673f
  
Dropping
AgentTesla

Comments