General
-
Target
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89
-
Size
120KB
-
Sample
221003-bds28sbddl
-
MD5
71217890d9021fa9c36ea99cffc63f5d
-
SHA1
d9a4fa18bbf4651c6283ce6e9890f1e90efcbfbc
-
SHA256
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89
-
SHA512
691b2e586a205834dca12575f8948f42eada09d50ca929efe89bb5cee55c4d7161b4139415e122218eb17a8507caba3c7cb0197ad8ba7e70b7173876ee849d35
-
SSDEEP
3072:rhXKsE/hYv4Bi6wS1ciXK98SrGHC5lpupnD3vKZ+x:laB6+1aCSl0pnryu
Static task
static1
Behavioral task
behavioral1
Sample
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
pony
http://talentos.clicken1.com:81/forum/viewtopic.php
http://panama.clicken1.com:81/forum/viewtopic.php
http://monteazul.clicken1.com:81/forum/viewtopic.php
http://199.168.184.198:81/forum/viewtopic.php
-
payload_url
http://yuniedesign.com/9vb6zZn.exe
http://henryandhymas.com.au/bGJ.exe
http://s408353824.websitehome.co.uk/jkWxKDT4.exe
http://taxi-katakolo.com/hP16H0nF.exe
Targets
-
-
Target
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89
-
Size
120KB
-
MD5
71217890d9021fa9c36ea99cffc63f5d
-
SHA1
d9a4fa18bbf4651c6283ce6e9890f1e90efcbfbc
-
SHA256
82803396d79a5a11d5a41b1bce41151521c266e9a6f01d634bdb721b45e07e89
-
SHA512
691b2e586a205834dca12575f8948f42eada09d50ca929efe89bb5cee55c4d7161b4139415e122218eb17a8507caba3c7cb0197ad8ba7e70b7173876ee849d35
-
SSDEEP
3072:rhXKsE/hYv4Bi6wS1ciXK98SrGHC5lpupnD3vKZ+x:laB6+1aCSl0pnryu
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-