General
-
Target
5492567906746368.zip
-
Size
97KB
-
Sample
210707-3h611tzrsx
-
MD5
7d3a50681f14cd96a2338ef2c303ca96
-
SHA1
b639af47a061f407938b5f6e9b22e0079302c3b4
-
SHA256
c9484d8dd52c9de152a8ec23be28efc945a5490786ca7c7c5f713a6f171dfbe9
-
SHA512
5f452acdb2de64ad8f22a247a5c9b1fc9f3beadbefedd51b990c50d37954438d3daf12f667d665359c793caec86afdb64b5e366e8a87974ff5dcc349a9b2d2f0
Static task
static1
Behavioral task
behavioral1
Sample
7d47c457d9501183b4ba717007d816fd815e41526ae067eddeeb2b4059c0368f.exe
Resource
win7v20210408
Malware Config
Extracted
pony
http://canri.org/wpcss/image/colour/gate.php
-
payload_url
http://canri.org/wpcss/image/colour/shit.exe
Targets
-
-
Target
7d47c457d9501183b4ba717007d816fd815e41526ae067eddeeb2b4059c0368f
-
Size
160KB
-
MD5
a0d0dd7ed9c013d97a4bdd6ad219d3c8
-
SHA1
fb54999105b0bc7e2e61370241a3cdf11d90b0ce
-
SHA256
7d47c457d9501183b4ba717007d816fd815e41526ae067eddeeb2b4059c0368f
-
SHA512
b7648f65a8733f4abc0469e018e8321e8e89a5feecfb99de46af3c9165a75503ac967ea932cef6e3ba0688e21b6b7e626646158a8197dcd682c6b619842cbc65
-
Deletes itself
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-