General
-
Target
2a0502cf640733eb38da1d8cc77fc843758e2a31ccc840297cd52f9b77624385
-
Size
96KB
-
Sample
221002-q9khasbbhm
-
MD5
6d69548bfc10fad7b2d81723bcf51f10
-
SHA1
56523909a1bc82ff6205f6005a3730e6529ae30b
-
SHA256
2a0502cf640733eb38da1d8cc77fc843758e2a31ccc840297cd52f9b77624385
-
SHA512
9310c0c0758eb5d9b7d21e023c90c6000f2857dbb1326323b9521d8ed9e1d1354dc77afb0457cab8ff9ed45e6fe93f264c578b5d8c3688220c58ccf9efc84ca8
-
SSDEEP
1536:GnGkWft2fDjw9D9qUJORESlm4yJFD/npb5YvAeSi5xKutLglK83:GklgjwVwuNSlm4+f5wAevelK
Static task
static1
Behavioral task
behavioral1
Sample
2a0502cf640733eb38da1d8cc77fc843758e2a31ccc840297cd52f9b77624385.exe
Resource
win7-20220812-en
Malware Config
Extracted
pony
http://mjklosal.info:4915/way/like.php
http://mhgderio.info:4915/way/like.php
Targets
-
-
Target
2a0502cf640733eb38da1d8cc77fc843758e2a31ccc840297cd52f9b77624385
-
Size
96KB
-
MD5
6d69548bfc10fad7b2d81723bcf51f10
-
SHA1
56523909a1bc82ff6205f6005a3730e6529ae30b
-
SHA256
2a0502cf640733eb38da1d8cc77fc843758e2a31ccc840297cd52f9b77624385
-
SHA512
9310c0c0758eb5d9b7d21e023c90c6000f2857dbb1326323b9521d8ed9e1d1354dc77afb0457cab8ff9ed45e6fe93f264c578b5d8c3688220c58ccf9efc84ca8
-
SSDEEP
1536:GnGkWft2fDjw9D9qUJORESlm4yJFD/npb5YvAeSi5xKutLglK83:GklgjwVwuNSlm4+f5wAevelK
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-