General
-
Target
560436f9411371c35982a229de866c64b903a2237245dfc35cee76b13cbad70f
-
Size
97KB
-
Sample
221125-z42n3aff47
-
MD5
934e2cd36e68c618c46c7fcf2bf63216
-
SHA1
176729c08ca94d96cca371d5e840b5aeeade5aab
-
SHA256
560436f9411371c35982a229de866c64b903a2237245dfc35cee76b13cbad70f
-
SHA512
b1c6f5697ee3b89b044362eb09700166b761ccba561229773a1b05c9b39e507fa3d23395dd004c3188566e087f344a2936a90c8432984246f0aba03cf03b99f7
-
SSDEEP
1536:x384STFEbqTD6zQglcQWJs4WgejGf7AIdwypy9O3XTvvxkzbkfql/uuqhA:2LBEXsgqQUTxVTIO3emql/uuqh
Behavioral task
behavioral1
Sample
560436f9411371c35982a229de866c64b903a2237245dfc35cee76b13cbad70f.exe
Resource
win7-20220812-en
Malware Config
Extracted
pony
http://www.reapcookware.com/Networking/servers/shared_ip/gate.php
Targets
-
-
Target
560436f9411371c35982a229de866c64b903a2237245dfc35cee76b13cbad70f
-
Size
97KB
-
MD5
934e2cd36e68c618c46c7fcf2bf63216
-
SHA1
176729c08ca94d96cca371d5e840b5aeeade5aab
-
SHA256
560436f9411371c35982a229de866c64b903a2237245dfc35cee76b13cbad70f
-
SHA512
b1c6f5697ee3b89b044362eb09700166b761ccba561229773a1b05c9b39e507fa3d23395dd004c3188566e087f344a2936a90c8432984246f0aba03cf03b99f7
-
SSDEEP
1536:x384STFEbqTD6zQglcQWJs4WgejGf7AIdwypy9O3XTvvxkzbkfql/uuqhA:2LBEXsgqQUTxVTIO3emql/uuqh
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-