Overview

overview

10

Static

static

978244f9c3...a7.dll

windows7-x64

1

978244f9c3...a7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    978244f9c31fce0d7115d4644827b52015decdf561b82e540332c488e9665ca7

  • Size

    76KB

  • Sample

    221201-zkgjsaab58

  • MD5

    53f6dbe5c0544fb43df9aed36255df91

  • SHA1

    39c295e7994d5b6f304f5bcbf57ee661cc45c06a

  • SHA256

    978244f9c31fce0d7115d4644827b52015decdf561b82e540332c488e9665ca7

  • SHA512

    1d8a599a40ca7c433eac2967118c8ea47de967667dfecb4e53a841bca559e326e469feb73b85523d29028b96196f9aaf271a0aa6fdaada7b029cc34bd61a88aa

  • SSDEEP

    1536:G08ycVb3jZUVVS4DgzeZqJvhmjK5ZxMbngWYpaA9HAhWoICEWMPo:UycV4ieZq1kjKrxMrctghrIlWMg

Score
10/10
ponydiscoveryratspywarestealerupx

Malware Config

Targets

    • Target

      978244f9c31fce0d7115d4644827b52015decdf561b82e540332c488e9665ca7

    • Size

      76KB

    • MD5

      53f6dbe5c0544fb43df9aed36255df91

    • SHA1

      39c295e7994d5b6f304f5bcbf57ee661cc45c06a

    • SHA256

      978244f9c31fce0d7115d4644827b52015decdf561b82e540332c488e9665ca7

    • SHA512

      1d8a599a40ca7c433eac2967118c8ea47de967667dfecb4e53a841bca559e326e469feb73b85523d29028b96196f9aaf271a0aa6fdaada7b029cc34bd61a88aa

    • SSDEEP

      1536:G08ycVb3jZUVVS4DgzeZqJvhmjK5ZxMbngWYpaA9HAhWoICEWMPo:UycV4ieZq1kjKrxMrctghrIlWMg

    Score
    10/10
    ponydiscoveryratspywarestealerupx

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks