Overview

overview

10

Static

static

Akt nachal...ya.exe

windows7_x64

10

Akt nachal...ya.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Akt nachalo iyulya.exe

  • Size

    1.1MB

  • Sample

    200713-5jv3hj7t86

  • MD5

    7f7c5cacc9352348efed2bd68321dae6

  • SHA1

    a01fe5803a58bdb1f3095806433186efbfc6f409

  • SHA256

    4e07e19a75305cc86b8714e29695b0297b663627d55e108fad4560613e02cd32

  • SHA512

    5cd1662246f7c6f3b3107d710c0ff754ed8c7bacaf5b6115a3c87ac54c95dd5ea08973ca72a609582620928dda2ea43f3af4aaf8e7971dbbdd48c1ca2f44a234

Score
10/10
ponydiscoveryratspywarestealer

Malware Config

Targets

    • Target

      Akt nachalo iyulya.exe

    • Size

      1.1MB

    • MD5

      7f7c5cacc9352348efed2bd68321dae6

    • SHA1

      a01fe5803a58bdb1f3095806433186efbfc6f409

    • SHA256

      4e07e19a75305cc86b8714e29695b0297b663627d55e108fad4560613e02cd32

    • SHA512

      5cd1662246f7c6f3b3107d710c0ff754ed8c7bacaf5b6115a3c87ac54c95dd5ea08973ca72a609582620928dda2ea43f3af4aaf8e7971dbbdd48c1ca2f44a234

    Score
    10/10
    discoveryratspywarestealerpony

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • Deletes itself

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spyware

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Accesses cryptocurrency wallets, possible credential harvesting

      spyware

    • Checks for installed software on the system

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks