General
-
Target
6926d78937fa8b9d59e71af3ab0c371997fa4671ba252b07d0a55d73f682ce8c
-
Size
120KB
-
Sample
221203-a66ncsdg8v
-
MD5
c0d2b9b3943a2d5e33830d976cb87f8d
-
SHA1
c53f06875448f337689c24c5fc6a2eb2e3e689bf
-
SHA256
6926d78937fa8b9d59e71af3ab0c371997fa4671ba252b07d0a55d73f682ce8c
-
SHA512
2e28971ce0a736ab432e090a966e58b7366e7079170ba6d1d6115beb109a9a636ef242ebb2fb9d5c7684c2b5d7be9f88bff39b9bb2139087f20d9a513af80ad8
-
SSDEEP
1536:shHwqBgIxeTK4Wc5oOEauN3zd6SpHQv1vllVyMOSMBk4/1RN+tODb1e9y:aBCMem4fGpju9A+49R48f
Static task
static1
Behavioral task
behavioral1
Sample
6926d78937fa8b9d59e71af3ab0c371997fa4671ba252b07d0a55d73f682ce8c.exe
Resource
win7-20220901-en
Malware Config
Extracted
pony
http://nursenextdoor.com:443/forum/viewtopic.php
http://dreamonseniorswish.org:443/forum/viewtopic.php
http://prospexleads.com:8080/forum/viewtopic.php
http://phonebillssuck.com:8080/forum/viewtopic.php
-
payload_url
http://www.osfphotos.org/XbWgrVUL.exe
http://studiobesso.it/hzEWNnX.exe
http://schodel.de/hQ1HZn.exe
Targets
-
-
Target
6926d78937fa8b9d59e71af3ab0c371997fa4671ba252b07d0a55d73f682ce8c
-
Size
120KB
-
MD5
c0d2b9b3943a2d5e33830d976cb87f8d
-
SHA1
c53f06875448f337689c24c5fc6a2eb2e3e689bf
-
SHA256
6926d78937fa8b9d59e71af3ab0c371997fa4671ba252b07d0a55d73f682ce8c
-
SHA512
2e28971ce0a736ab432e090a966e58b7366e7079170ba6d1d6115beb109a9a636ef242ebb2fb9d5c7684c2b5d7be9f88bff39b9bb2139087f20d9a513af80ad8
-
SSDEEP
1536:shHwqBgIxeTK4Wc5oOEauN3zd6SpHQv1vllVyMOSMBk4/1RN+tODb1e9y:aBCMem4fGpju9A+49R48f
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-