General
-
Target
4fc7d8be7596b06dc84c4c6d3a440dfdf9d5e01a26a007ce8adf47a94c4fe6c9
-
Size
78KB
-
Sample
221002-qtkhcsadgl
-
MD5
6cff3f00533c9d18561277b8116fcf90
-
SHA1
88dcbf130d1d3fae174dc7eea168fee380f60c6b
-
SHA256
4fc7d8be7596b06dc84c4c6d3a440dfdf9d5e01a26a007ce8adf47a94c4fe6c9
-
SHA512
e1f87a1d6cf6eca77121136ede30df764191571ce7a5d2fd1561c177e9d402cb42fa6444338a3f9006375578bc88c5c90e0b36a7d5dcb3a6477f5838f685e1ad
-
SSDEEP
1536:wZGUx/YRAQ2XMH6PjCkao5Wxj+6A/3pqj1Sgr4ve+MYfFsMMCtkETN1c:wZGUx/YRAQH6PjCkBxTQj1xVbwsMMkx6
Static task
static1
Behavioral task
behavioral1
Sample
4fc7d8be7596b06dc84c4c6d3a440dfdf9d5e01a26a007ce8adf47a94c4fe6c9.exe
Resource
win7-20220812-en
Malware Config
Extracted
pony
http://trippling.com/forum/viewtopic.php
http://beachfrontconcierge.com/forum/viewtopic.php
http://dinneraffairs.com/forum/viewtopic.php
http://douglasvillestorage.com/forum/viewtopic.php
-
payload_url
http://www.kavalevent.com/5TH.exe
http://ihlwholesale.com/uSWiXbH.exe
http://www.sandbox.crownbees.com/9ffyKeM.exe
http://www.splendidhonda.com/wUy1WgTP.exe
Targets
-
-
Target
4fc7d8be7596b06dc84c4c6d3a440dfdf9d5e01a26a007ce8adf47a94c4fe6c9
-
Size
78KB
-
MD5
6cff3f00533c9d18561277b8116fcf90
-
SHA1
88dcbf130d1d3fae174dc7eea168fee380f60c6b
-
SHA256
4fc7d8be7596b06dc84c4c6d3a440dfdf9d5e01a26a007ce8adf47a94c4fe6c9
-
SHA512
e1f87a1d6cf6eca77121136ede30df764191571ce7a5d2fd1561c177e9d402cb42fa6444338a3f9006375578bc88c5c90e0b36a7d5dcb3a6477f5838f685e1ad
-
SSDEEP
1536:wZGUx/YRAQ2XMH6PjCkao5Wxj+6A/3pqj1Sgr4ve+MYfFsMMCtkETN1c:wZGUx/YRAQH6PjCkBxTQj1xVbwsMMkx6
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-