General
-
Target
c0150543944bc0dd08e602f453da6a03fc44c535bf5863a1b75b956ec1da3e3a.exe
-
Size
105KB
-
Sample
210724-1qxfwyeede
-
MD5
ec833eb164e86c797df3dab47f6e0774
-
SHA1
ba94798452ccd67cc2cd5f41bfa945b614205ab7
-
SHA256
c0150543944bc0dd08e602f453da6a03fc44c535bf5863a1b75b956ec1da3e3a
-
SHA512
b1c9b09a8c8381145b309ca7a74540c0ca42e5ee6275b431ca2f1b45a1b5ed9005bda2c12b5a01830cbd96c25b1e2565d67357c1519538a75bc4051506907a41
Behavioral task
behavioral1
Sample
c0150543944bc0dd08e602f453da6a03fc44c535bf5863a1b75b956ec1da3e3a.exe
Resource
win7v20210408
Malware Config
Extracted
pony
http://ekitty.net/dh/Panel/gate.php
-
payload_url
http://ekitty.net/dh/Panel/DH.exe
Targets
-
-
Target
c0150543944bc0dd08e602f453da6a03fc44c535bf5863a1b75b956ec1da3e3a.exe
-
Size
105KB
-
MD5
ec833eb164e86c797df3dab47f6e0774
-
SHA1
ba94798452ccd67cc2cd5f41bfa945b614205ab7
-
SHA256
c0150543944bc0dd08e602f453da6a03fc44c535bf5863a1b75b956ec1da3e3a
-
SHA512
b1c9b09a8c8381145b309ca7a74540c0ca42e5ee6275b431ca2f1b45a1b5ed9005bda2c12b5a01830cbd96c25b1e2565d67357c1519538a75bc4051506907a41
-
suricata: ET MALWARE Fareit/Pony Downloader Checkin 3
-
suricata: ET MALWARE Pony Downloader HTTP Library MSIE 5 Win98
-
Deletes itself
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-