General
-
Target
0a4f990f5c846103746ccf9fa7372315f3e289c065f2401c05fbc022ea25d02d
-
Size
137KB
-
Sample
221003-b1431scdek
-
MD5
655c8b9f1c33060011e2ef060bc3c630
-
SHA1
22ec15a0fee26e264c0bcf57c17ef133bfd431c9
-
SHA256
0a4f990f5c846103746ccf9fa7372315f3e289c065f2401c05fbc022ea25d02d
-
SHA512
5a6af0c34bb539a6011be4ea360706637e856f9a246e3a49f55da187a94a43be5b5317d03c1ffaea332830fbcf3e8e2735e5f95d5de26d36d912ebf3dae0e462
-
SSDEEP
3072:+HEHLCTb5+BfsqLLiSHenqMB1L4nr91O/2UOqwcb1u:/HLC/cBfsqLLdxyBiyONcxu
Static task
static1
Behavioral task
behavioral1
Sample
0a4f990f5c846103746ccf9fa7372315f3e289c065f2401c05fbc022ea25d02d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0a4f990f5c846103746ccf9fa7372315f3e289c065f2401c05fbc022ea25d02d.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
pony
http://angels-mail.com:8080/forum/viewtopic.php
http://mail.yaklasim.com:8080/forum/viewtopic.php
http://lipo-exdallas.com/forum/viewtopic.php
http://lipo-exdenver.com/forum/viewtopic.php
-
payload_url
http://angerso.com/fahf.exe
http://184.107.149.234/Usq.exe
http://kpcmiami.org/RX0HWV.exe
Targets
-
-
Target
0a4f990f5c846103746ccf9fa7372315f3e289c065f2401c05fbc022ea25d02d
-
Size
137KB
-
MD5
655c8b9f1c33060011e2ef060bc3c630
-
SHA1
22ec15a0fee26e264c0bcf57c17ef133bfd431c9
-
SHA256
0a4f990f5c846103746ccf9fa7372315f3e289c065f2401c05fbc022ea25d02d
-
SHA512
5a6af0c34bb539a6011be4ea360706637e856f9a246e3a49f55da187a94a43be5b5317d03c1ffaea332830fbcf3e8e2735e5f95d5de26d36d912ebf3dae0e462
-
SSDEEP
3072:+HEHLCTb5+BfsqLLiSHenqMB1L4nr91O/2UOqwcb1u:/HLC/cBfsqLLdxyBiyONcxu
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-