General
-
Target
bddf0e44eb82cfc4ec4752e6e253e71f8c58350b2c2388ca83509fe7130a14ff
-
Size
38KB
-
Sample
221127-m4rsmsca33
-
MD5
2cea10458427547a67c1f3581f87c425
-
SHA1
91efeb72010da03ce1ec517ffa16640f6c441894
-
SHA256
bddf0e44eb82cfc4ec4752e6e253e71f8c58350b2c2388ca83509fe7130a14ff
-
SHA512
465561cac59b2fadbd669608816208cc2c67752586a0d610f9d0f1e51c5748a8e1953ccadebe9d11e4d004ca74b01426ae07d7cdfde795beb2c55e006175e184
-
SSDEEP
768:Boel2j+kmDig6gvke0pPkk0tx21xzpiqgv1q32wYEKBnbcuyD7UFcr:Boe0x9g6g85ak0tk1xzZgIGwwnouy8FK
Behavioral task
behavioral1
Sample
bddf0e44eb82cfc4ec4752e6e253e71f8c58350b2c2388ca83509fe7130a14ff.exe
Resource
win7-20221111-en
Malware Config
Extracted
pony
http://aslaasa.eu/imageZa/clava.php
http://loshadkaza.eu/imageZa/clava.php
http://saslasw.eu//imageZa/clava.php
Targets
-
-
Target
bddf0e44eb82cfc4ec4752e6e253e71f8c58350b2c2388ca83509fe7130a14ff
-
Size
38KB
-
MD5
2cea10458427547a67c1f3581f87c425
-
SHA1
91efeb72010da03ce1ec517ffa16640f6c441894
-
SHA256
bddf0e44eb82cfc4ec4752e6e253e71f8c58350b2c2388ca83509fe7130a14ff
-
SHA512
465561cac59b2fadbd669608816208cc2c67752586a0d610f9d0f1e51c5748a8e1953ccadebe9d11e4d004ca74b01426ae07d7cdfde795beb2c55e006175e184
-
SSDEEP
768:Boel2j+kmDig6gvke0pPkk0tx21xzpiqgv1q32wYEKBnbcuyD7UFcr:Boe0x9g6g85ak0tk1xzZgIGwwnouy8FK
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-