General
-
Target
039cbe697f81e11f9e3b2c57c1793de4f39f3e75d14e15aae6460c4605cb28be
-
Size
94KB
-
Sample
221002-rp6qgacabq
-
MD5
714cd13d9182242f327d733c9bcba5a0
-
SHA1
7dae9b1893bfd5e71d40a30ea4cfa6e8b2d792c9
-
SHA256
039cbe697f81e11f9e3b2c57c1793de4f39f3e75d14e15aae6460c4605cb28be
-
SHA512
8ec309dc8b48e3c5c0a656f09b6eb77e8fc5097dbfc4481a8ba1562857653d263322c5e256fe70744a660491fe1ffe8401dfa2b2921d70991cbf4c7f54fd70a8
-
SSDEEP
1536:QGFmIYzx55YH85Ggcihr6O3O+NZPXG/GyhJUNtMOHAzwaimLlhWB45kmRtz46:Qqg55YHSBDhr6O3O+NZvGOE+NtNH5QLg
Static task
static1
Behavioral task
behavioral1
Sample
039cbe697f81e11f9e3b2c57c1793de4f39f3e75d14e15aae6460c4605cb28be.exe
Resource
win7-20220901-en
Malware Config
Extracted
pony
http://nvfdyk.info:4915/pic/staff.php
http://kdfjhk.info:4915/pic/staff.php
Targets
-
-
Target
039cbe697f81e11f9e3b2c57c1793de4f39f3e75d14e15aae6460c4605cb28be
-
Size
94KB
-
MD5
714cd13d9182242f327d733c9bcba5a0
-
SHA1
7dae9b1893bfd5e71d40a30ea4cfa6e8b2d792c9
-
SHA256
039cbe697f81e11f9e3b2c57c1793de4f39f3e75d14e15aae6460c4605cb28be
-
SHA512
8ec309dc8b48e3c5c0a656f09b6eb77e8fc5097dbfc4481a8ba1562857653d263322c5e256fe70744a660491fe1ffe8401dfa2b2921d70991cbf4c7f54fd70a8
-
SSDEEP
1536:QGFmIYzx55YH85Ggcihr6O3O+NZPXG/GyhJUNtMOHAzwaimLlhWB45kmRtz46:Qqg55YHSBDhr6O3O+NZvGOE+NtNH5QLg
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-