General
-
Target
d44995b1da3b89b59746c4e1241f2fd29ce6dfbf25c3c780538c2abbf8bf95e2
-
Size
170KB
-
Sample
221126-k2v16sfg67
-
MD5
dc01865581cff771cb49962c616542d3
-
SHA1
6c0885e6caeaec9c7d56684133e9b28ab75982a1
-
SHA256
d44995b1da3b89b59746c4e1241f2fd29ce6dfbf25c3c780538c2abbf8bf95e2
-
SHA512
cfb9c1f7a1525e15959ba64a595ea557e3e1a110cc26a4662244f6d0ddfe2f3b0b3775c6aad7173fb469eba5f5df1ff9b88edc19992cc1566966fb678210c18e
-
SSDEEP
3072:w3Kry4S9LE7ZrjXvRTwof2ybUWOJ3R24D3Q:w3KwLyZ3p3eybnOJ3RVDA
Static task
static1
Behavioral task
behavioral1
Sample
d44995b1da3b89b59746c4e1241f2fd29ce6dfbf25c3c780538c2abbf8bf95e2.exe
Resource
win7-20220812-en
Malware Config
Extracted
pony
http://sayee1.ddob.al/regate/regate.php
http://sayee1-b.ddob.al/regate/regate.php
http://sayee1-c.ddob.al/regate/regate.php
Targets
-
-
Target
d44995b1da3b89b59746c4e1241f2fd29ce6dfbf25c3c780538c2abbf8bf95e2
-
Size
170KB
-
MD5
dc01865581cff771cb49962c616542d3
-
SHA1
6c0885e6caeaec9c7d56684133e9b28ab75982a1
-
SHA256
d44995b1da3b89b59746c4e1241f2fd29ce6dfbf25c3c780538c2abbf8bf95e2
-
SHA512
cfb9c1f7a1525e15959ba64a595ea557e3e1a110cc26a4662244f6d0ddfe2f3b0b3775c6aad7173fb469eba5f5df1ff9b88edc19992cc1566966fb678210c18e
-
SSDEEP
3072:w3Kry4S9LE7ZrjXvRTwof2ybUWOJ3R24D3Q:w3KwLyZ3p3eybnOJ3RVDA
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-