General
-
Target
d12ce2db05ab75e259837ed7a71351f24409c7ec8104829301ffafe9ba037aad
-
Size
102KB
-
Sample
221001-14hfvsahdp
-
MD5
731c4471af890a790f6b86ed22c3550d
-
SHA1
dd0e6833030626dbbfe1e6f6ed0553afba0930b2
-
SHA256
d12ce2db05ab75e259837ed7a71351f24409c7ec8104829301ffafe9ba037aad
-
SHA512
e5941906d5f9299b5abd3b92bd9b1ab2377c78193f705c59c4418efa61f9164f975ed95fd6c3f609d2b47b939ee3b276203ff9aae03f2a44be2f770848a5d7f4
-
SSDEEP
3072:N4rfdR1406Vv/JaB4pC5e4/y00wQSBbmjs:+jdRuLpQTHQ1
Static task
static1
Behavioral task
behavioral1
Sample
d12ce2db05ab75e259837ed7a71351f24409c7ec8104829301ffafe9ba037aad.exe
Resource
win7-20220901-en
Malware Config
Extracted
pony
http://115.47.49.181/0NK6XVdsm4L0/DFs2evNyFAhS.php
http://115.47.49.181/0NK6XV/doctorlhasa.php
Targets
-
-
Target
d12ce2db05ab75e259837ed7a71351f24409c7ec8104829301ffafe9ba037aad
-
Size
102KB
-
MD5
731c4471af890a790f6b86ed22c3550d
-
SHA1
dd0e6833030626dbbfe1e6f6ed0553afba0930b2
-
SHA256
d12ce2db05ab75e259837ed7a71351f24409c7ec8104829301ffafe9ba037aad
-
SHA512
e5941906d5f9299b5abd3b92bd9b1ab2377c78193f705c59c4418efa61f9164f975ed95fd6c3f609d2b47b939ee3b276203ff9aae03f2a44be2f770848a5d7f4
-
SSDEEP
3072:N4rfdR1406Vv/JaB4pC5e4/y00wQSBbmjs:+jdRuLpQTHQ1
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-