General
-
Target
c03bbde2df2d3cb14473fc66d22be07cd3215a0185ceedc7c31f71c0640d024e
-
Size
109KB
-
Sample
221203-cjvnpahf9x
-
MD5
5f2b3708f3080fd1ce4a7058b4dbf833
-
SHA1
72ffe1c1cc8d725d6e2057e4b3b37f0c40a49f95
-
SHA256
c03bbde2df2d3cb14473fc66d22be07cd3215a0185ceedc7c31f71c0640d024e
-
SHA512
f9e06fdb76262567d42ee1fb866fcf7b700046092e051bd4ddf5cf1567fcac068ad3c4436a5f2cfa2ec7f938d88792dc26be8d109a5cc05cad15dda01d005ceb
-
SSDEEP
3072:44lMVnz8R/7dB7xctxauL+RGdNcKtUwwji7upzYx1Z:4NVn6dqauL+RmNNtUDe7O
Static task
static1
Behavioral task
behavioral1
Sample
c03bbde2df2d3cb14473fc66d22be07cd3215a0185ceedc7c31f71c0640d024e.exe
Resource
win7-20220812-en
Malware Config
Extracted
pony
http://178.77.74.57:8080/forum/viewtopic.php
http://v3cz.web2cio.com:8080/forum/viewtopic.php
http://v3sk.web2cio.com:8080/forum/viewtopic.php
http://217.198.116.126:8080/forum/viewtopic.php
-
payload_url
http://www.bodyundbeach-ruediger.de/oEx.exe
http://spulciacase.com/G7HKVXY0.exe
Targets
-
-
Target
c03bbde2df2d3cb14473fc66d22be07cd3215a0185ceedc7c31f71c0640d024e
-
Size
109KB
-
MD5
5f2b3708f3080fd1ce4a7058b4dbf833
-
SHA1
72ffe1c1cc8d725d6e2057e4b3b37f0c40a49f95
-
SHA256
c03bbde2df2d3cb14473fc66d22be07cd3215a0185ceedc7c31f71c0640d024e
-
SHA512
f9e06fdb76262567d42ee1fb866fcf7b700046092e051bd4ddf5cf1567fcac068ad3c4436a5f2cfa2ec7f938d88792dc26be8d109a5cc05cad15dda01d005ceb
-
SSDEEP
3072:44lMVnz8R/7dB7xctxauL+RGdNcKtUwwji7upzYx1Z:4NVn6dqauL+RmNNtUDe7O
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-