General
-
Target
7b9534d645b43e44e7c3f564551369454a7cc07cdabab4e0f2402295615a4bdd
-
Size
123KB
-
Sample
221002-m5y84sdfdm
-
MD5
70f0f14302532402fc3ef651e00d8cc0
-
SHA1
01ed1233a06889fdbb0eef152465ca6f28504432
-
SHA256
7b9534d645b43e44e7c3f564551369454a7cc07cdabab4e0f2402295615a4bdd
-
SHA512
a20c06926f1249a849ad8d350418bb724bbb3224a6b57a34c0ef7761493b5232a93b838a8e0714c6713f199ab3b1d56db21abad48a38ce279d7893cf68ba55ff
-
SSDEEP
3072:fEKF7Sws1vyT/V7n0CSJjPZE//2QROiD:XQvyT/V77StPZEHRROiD
Static task
static1
Behavioral task
behavioral1
Sample
7b9534d645b43e44e7c3f564551369454a7cc07cdabab4e0f2402295615a4bdd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7b9534d645b43e44e7c3f564551369454a7cc07cdabab4e0f2402295615a4bdd.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
pony
http://beebathandkitchens.com/forum/viewtopic.php
http://beekitchenandbath.com/forum/viewtopic.php
http://beekitchenandbath.info/forum/viewtopic.php
http://epiccraft.info/forum/viewtopic.php
-
payload_url
http://ftp.bsdgroupinc.com/5cpnmZ0.exe
http://sikka.co/cwF04.exe
http://www.mshc.in/hKW.exe
http://test.plexidesign.it/TW5M4tq.exe
http://95.110.228.229/Y0tmeeSZ.exe
Targets
-
-
Target
7b9534d645b43e44e7c3f564551369454a7cc07cdabab4e0f2402295615a4bdd
-
Size
123KB
-
MD5
70f0f14302532402fc3ef651e00d8cc0
-
SHA1
01ed1233a06889fdbb0eef152465ca6f28504432
-
SHA256
7b9534d645b43e44e7c3f564551369454a7cc07cdabab4e0f2402295615a4bdd
-
SHA512
a20c06926f1249a849ad8d350418bb724bbb3224a6b57a34c0ef7761493b5232a93b838a8e0714c6713f199ab3b1d56db21abad48a38ce279d7893cf68ba55ff
-
SSDEEP
3072:fEKF7Sws1vyT/V7n0CSJjPZE//2QROiD:XQvyT/V77StPZEHRROiD
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-