General
-
Target
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260
-
Size
119KB
-
Sample
221002-k7k36agha5
-
MD5
672ae6259572394852160ce5bbb86450
-
SHA1
6af13682939606ce0b80eac241295d615483f380
-
SHA256
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260
-
SHA512
4e7c7a7b97cf5b4598837bc307d784790d76a959ca65581b723f61311f121843169bd4dabdd01bdd0296aa157af610f5f4fa69060bb25125d9b33a50dc5a97b6
-
SSDEEP
3072:3JeJL1o96UGbZuCx9q/AlMTYZnixbWPN:5C3FbZ3x9q/sMcZioN
Static task
static1
Behavioral task
behavioral1
Sample
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
pony
http://116.122.158.195:8080/forum/viewtopic.php
http://4rentcorpuschristi.com/forum/viewtopic.php
http://4rentdallas.com/forum/viewtopic.php
http://4rentdetroit.com/forum/viewtopic.php
-
payload_url
http://855porayuda.com/8SmNkqi.exe
http://kalogerakis.gr/a8aVHo4.exe
http://nteshop.es/NNWic.exe
Targets
-
-
Target
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260
-
Size
119KB
-
MD5
672ae6259572394852160ce5bbb86450
-
SHA1
6af13682939606ce0b80eac241295d615483f380
-
SHA256
adb22d09bdfaf54f9e5b1fefba9b5175671aa017706d8e2d2daab245f2cb2260
-
SHA512
4e7c7a7b97cf5b4598837bc307d784790d76a959ca65581b723f61311f121843169bd4dabdd01bdd0296aa157af610f5f4fa69060bb25125d9b33a50dc5a97b6
-
SSDEEP
3072:3JeJL1o96UGbZuCx9q/AlMTYZnixbWPN:5C3FbZ3x9q/sMcZioN
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-