MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7bbf783d588b2b5bb6dc06b85f0cf359afff98740687b19202d43bd4aa797a3a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Pony


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7bbf783d588b2b5bb6dc06b85f0cf359afff98740687b19202d43bd4aa797a3a
SHA3-384 hash: 36a1a7591cc38b00f48519169377f3644b2c83073fc6fbcf335512f79cbc11d295ffbe52d46960df2bff5adfc85d557a
SHA1 hash: 68b41de1c1e221ba12648d0b13570d61f7d22da5
MD5 hash: 2721095f1598a1e2ea8df63dcd8ba51d
humanhash: carpet-crazy-california-oxygen
File name:F-4.4.1.4-01-06.02 Chestionar de autoevaluare a furnizorului engleza.PDF.z
Download: download sample
Signature Pony
Create hunting rule
File size:170'242 bytes
First seen:2020-06-03 10:25:39 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 3072:XSJn6Z2ah/pHzXSriolu9poBOxKCDAZGg+okGz4VG6b9IXnWHn7Leyla:CJn6Z2aTzXSKMZf+Yz4ICOnqnn2
TLSH 93F323EB73BDE5530A29873493541FFB05791BB8CA5845B305087F997617C8C2F226CA
Reporter jarumlus
Tags:Pony

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-03 11:01:49 UTC
File Type:
Binary (Archive)
Extracted files:
5
AV detection:
15 of 31 (48.39%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=po7xqpkyrmvvxnw4a24f6dhtlgx77gdua2d3deqc2q55jktzpi5a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Pony

z 7bbf783d588b2b5bb6dc06b85f0cf359afff98740687b19202d43bd4aa797a3a

(this sample)

Pony

Executable exe 692edb91091b23c85b594f82921ee682aa25f1902d048e54fed4edafe0549e3f

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 692edb91091b23c85b594f82921ee682aa25f1902d048e54fed4edafe0549e3f
  
Dropping
MD5 100f8cb9263759cb10958d64acc954c6

Comments