General
-
Target
500454df4886817c66d4430d00ca28fe3bc0509f1fdd5e0863a151e50c591109.exe
-
Size
89KB
-
Sample
220514-q5mf4aaae5
-
MD5
0f239c39870792d5601e9cb8d13282d2
-
SHA1
222c934753f608665fab9367bd37ff83d9e492a1
-
SHA256
500454df4886817c66d4430d00ca28fe3bc0509f1fdd5e0863a151e50c591109
-
SHA512
b5b73442c79869165c02f0cccb9635ac647a09588be2af203e8c36a99b624ab534ce5ecfbd86509a5f7db07f44eb85ab8772201c368489971f657915aae478de
Static task
static1
Behavioral task
behavioral1
Sample
500454df4886817c66d4430d00ca28fe3bc0509f1fdd5e0863a151e50c591109.exe
Resource
win7-20220414-en
Malware Config
Extracted
pony
http://4.professionalsoft.com/ponyb/gate.php
http://4.promatika.com/ponyb/gate.php
-
payload_url
http://doorway.co/eRY0kp.exe
http://actia.pl/FcNa.exe
http://k2steel.com/iCq7.exe
http://aktibbicihazlar.com/ttya.exe
http://assulapia.com/cAvbh.exe
Targets
-
-
Target
500454df4886817c66d4430d00ca28fe3bc0509f1fdd5e0863a151e50c591109.exe
-
Size
89KB
-
MD5
0f239c39870792d5601e9cb8d13282d2
-
SHA1
222c934753f608665fab9367bd37ff83d9e492a1
-
SHA256
500454df4886817c66d4430d00ca28fe3bc0509f1fdd5e0863a151e50c591109
-
SHA512
b5b73442c79869165c02f0cccb9635ac647a09588be2af203e8c36a99b624ab534ce5ecfbd86509a5f7db07f44eb85ab8772201c368489971f657915aae478de
-
suricata: ET MALWARE Fareit/Pony Downloader Checkin 2
suricata: ET MALWARE Fareit/Pony Downloader Checkin 2
-
suricata: ET MALWARE Fareit/Pony Downloader Checkin 3
suricata: ET MALWARE Fareit/Pony Downloader Checkin 3
-
suricata: ET MALWARE Pony Downloader HTTP Library MSIE 5 Win98
suricata: ET MALWARE Pony Downloader HTTP Library MSIE 5 Win98
-
suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer
suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer
-
suricata: ET MALWARE Win32.Fareit.A/Pony Downloader Checkin
suricata: ET MALWARE Win32.Fareit.A/Pony Downloader Checkin
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-