General
-
Target
b2e062e68be5a761aab03a8ca9bf5a2e844ed7d4084ad8ffbb09b78267e810b5
-
Size
72KB
-
Sample
221002-pqjwzsfae2
-
MD5
75e389fc3baf0aea318e334ff37f8ac0
-
SHA1
cf86d5cc98f3882f7ba0398ac7eb95e90e135e1c
-
SHA256
b2e062e68be5a761aab03a8ca9bf5a2e844ed7d4084ad8ffbb09b78267e810b5
-
SHA512
c0c9fb125ec048554000e6e37970729ebb6f508f4c35d6f0f5c404161deeb6b66560dd590490c0e17dfcbf7e46e40e357c0f41380d70a035ce3cd2de52e1a46a
-
SSDEEP
1536:8YZKFiz2Z8xQ8lYKDfbjHCWlarC2tCV15CO6UHl8i07:xIwzGIQcYKDbjHCMar9L0l8iI
Static task
static1
Behavioral task
behavioral1
Sample
b2e062e68be5a761aab03a8ca9bf5a2e844ed7d4084ad8ffbb09b78267e810b5.exe
Resource
win7-20220812-en
Malware Config
Extracted
pony
http://megastreet.in/js/gate.php
Targets
-
-
Target
b2e062e68be5a761aab03a8ca9bf5a2e844ed7d4084ad8ffbb09b78267e810b5
-
Size
72KB
-
MD5
75e389fc3baf0aea318e334ff37f8ac0
-
SHA1
cf86d5cc98f3882f7ba0398ac7eb95e90e135e1c
-
SHA256
b2e062e68be5a761aab03a8ca9bf5a2e844ed7d4084ad8ffbb09b78267e810b5
-
SHA512
c0c9fb125ec048554000e6e37970729ebb6f508f4c35d6f0f5c404161deeb6b66560dd590490c0e17dfcbf7e46e40e357c0f41380d70a035ce3cd2de52e1a46a
-
SSDEEP
1536:8YZKFiz2Z8xQ8lYKDfbjHCWlarC2tCV15CO6UHl8i07:xIwzGIQcYKDbjHCMar9L0l8iI
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-