General
-
Target
801a98719d779caa75815a177e5b2989cb4e7c130f9743c64193875aec4df9d9
-
Size
94KB
-
Sample
221002-p92wxahear
-
MD5
6fed7323d9dfcecf54640fc4ad1c7160
-
SHA1
d2d2091d49605b0f8a9346c21ce2816c41c813fd
-
SHA256
801a98719d779caa75815a177e5b2989cb4e7c130f9743c64193875aec4df9d9
-
SHA512
41561436d5d3c64fff6937beb61a91f67dffdff58555b182ff42ea245704ad34c42156f9dfb074f4633b45135465d144ce131f00959a056127effc14d43137d4
-
SSDEEP
1536:OOtElt8ldvJNUT97Y+81jor5JCe6QWafcQBE79FTgn30lBtduy1bAK2:OO2n8l5bU5s+kjor511fcQBETBlB1
Static task
static1
Behavioral task
behavioral1
Sample
801a98719d779caa75815a177e5b2989cb4e7c130f9743c64193875aec4df9d9.exe
Resource
win7-20220812-en
Malware Config
Extracted
pony
http://ltygxhu.pw:4915/way/like.php
http://culyuru.pw:4915/way/like.php
Targets
-
-
Target
801a98719d779caa75815a177e5b2989cb4e7c130f9743c64193875aec4df9d9
-
Size
94KB
-
MD5
6fed7323d9dfcecf54640fc4ad1c7160
-
SHA1
d2d2091d49605b0f8a9346c21ce2816c41c813fd
-
SHA256
801a98719d779caa75815a177e5b2989cb4e7c130f9743c64193875aec4df9d9
-
SHA512
41561436d5d3c64fff6937beb61a91f67dffdff58555b182ff42ea245704ad34c42156f9dfb074f4633b45135465d144ce131f00959a056127effc14d43137d4
-
SSDEEP
1536:OOtElt8ldvJNUT97Y+81jor5JCe6QWafcQBE79FTgn30lBtduy1bAK2:OO2n8l5bU5s+kjor511fcQBETBlB1
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-