MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 69d1e893ede3cd4df544845d56eb19747ba7dc337222da90012b07621c690c52. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Pony


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 69d1e893ede3cd4df544845d56eb19747ba7dc337222da90012b07621c690c52
SHA3-384 hash: a48872b671b9fcd89deaa7b026dafa535aba62ce1f7c477f2bb872668a88f08747873205baf8795b9d2859001a64d6af
SHA1 hash: db1c909b97b987ee081a32e03564d75782e8fc7d
MD5 hash: a15e281ea23b81dcf9f1dc198b14773b
humanhash: fourteen-red-cold-indigo
File name:Curriculum Vitae.scanned.(cv).DOC.tl.txt.zip
Download: download sample
Signature Pony
Create hunting rule
File size:186'563 bytes
First seen:2020-06-24 07:25:31 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 3072:5un1+WTFSJKTDZp56ElAXMcdCJes7fFyncyNS33kDs1h92NF1dXQ69JKy0UXatKb:GTFSJKTDr56/XHwz7xOS33bAF1VQ69QQ
TLSH 8B0412B338D7EC5882EE64819D3EF8E0B550C203B7A2F8CD6759445C518B449BF4DEAA
Reporter jarumlus
Tags:Pony

Intelligence

File Origin
# of uploads :
1
# of downloads :
692
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Kryptik.VFR-1.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/69d1e893ede3cd4df544845d56eb19747ba7dc337222da90012b07621c690c52/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-24 01:12:02 UTC
AV detection:
25 of 31 (80.65%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=nhi6re7n4pgu35keqrovn2yzor52pxbtoirnveabfmdwehdjbrja._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Pony

zip 69d1e893ede3cd4df544845d56eb19747ba7dc337222da90012b07621c690c52

(this sample)

Pony

Executable exe d68bd7932627f7de6d92abfd3859474a64dc95ac93f8fb6fc4901d27f237ebe8

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d68bd7932627f7de6d92abfd3859474a64dc95ac93f8fb6fc4901d27f237ebe8
  
Dropping
MD5 dfc65c554d357255441ffc9f33a1b25f

Comments