General
-
Target
0a349d537419340a05b600ba11acef23a95eb692fe3f695cdb22b6cc0901438b
-
Size
115KB
-
Sample
221125-mekyssdg7y
-
MD5
97ccee7b8b07659debbd7f58462f64c0
-
SHA1
1512c9166c4cbfb5ebec5f749c6891e276fc1d15
-
SHA256
0a349d537419340a05b600ba11acef23a95eb692fe3f695cdb22b6cc0901438b
-
SHA512
15a1a0d5ff4bfc91e3ff60b18e667784fe02f0e554e99fa34bfc6bc182107305554d178b18f76e1179224bbd4679a793fd3131cab5901360d999bc2e98f2aa22
-
SSDEEP
3072:tp5NXwm4vgKaZrAYVj3eCYGFxuc0FIlTy:ZNXwmUgKaJRL7YGvucm4Ty
Static task
static1
Behavioral task
behavioral1
Sample
0a349d537419340a05b600ba11acef23a95eb692fe3f695cdb22b6cc0901438b.exe
Resource
win7-20220812-en
Malware Config
Extracted
pony
http://69.194.194.221/forum/viewtopic.php
http://74.91.123.203/forum/viewtopic.php
-
payload_url
http://www.caglar-insaat.com/ApqZe.exe
http://talkwithme.ca/neQgg.exe
http://legulas.com.br/kAiyobG7.exe
Targets
-
-
Target
0a349d537419340a05b600ba11acef23a95eb692fe3f695cdb22b6cc0901438b
-
Size
115KB
-
MD5
97ccee7b8b07659debbd7f58462f64c0
-
SHA1
1512c9166c4cbfb5ebec5f749c6891e276fc1d15
-
SHA256
0a349d537419340a05b600ba11acef23a95eb692fe3f695cdb22b6cc0901438b
-
SHA512
15a1a0d5ff4bfc91e3ff60b18e667784fe02f0e554e99fa34bfc6bc182107305554d178b18f76e1179224bbd4679a793fd3131cab5901360d999bc2e98f2aa22
-
SSDEEP
3072:tp5NXwm4vgKaZrAYVj3eCYGFxuc0FIlTy:ZNXwmUgKaJRL7YGvucm4Ty
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-