General
-
Target
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5
-
Size
111KB
-
Sample
221203-hzr6dsed59
-
MD5
2d824d8d3a9d6c6039dde6b188177740
-
SHA1
1151abf4c65b7b27e50dc49036877c98c97d646f
-
SHA256
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5
-
SHA512
2202f5bfa365cd24c4797d3bf209301cd6042518462432cde35540a56672660176738dc35b0ab52ff2b4581b727893f7aaa68d09f805851c9e17cb2a92f63f4a
-
SSDEEP
3072:4nyO/bIV2eQTy6sBOwRoiWhi67ZB27q8bTIXmCSfF49:M/bIV2eQ+6soZiMi0Z4q8beS
Static task
static1
Behavioral task
behavioral1
Sample
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
pony
http://filmpunjab.com/forum/viewtopic.php
http://fimaka.com/forum/viewtopic.php
http://manpreetsidhu.com/forum/viewtopic.php
http://saltlakecityutahcommercialrealestate.com/forum/viewtopic.php
-
payload_url
http://jaycees.co.uk/zHHgp2.exe
http://upcomingfunerals.com/oBTASWtn.exe
http://familiapaixao.coconet-us.com/tmMTo.exe
http://www.maschinen.be/gMYiQdv.exe
Targets
-
-
Target
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5
-
Size
111KB
-
MD5
2d824d8d3a9d6c6039dde6b188177740
-
SHA1
1151abf4c65b7b27e50dc49036877c98c97d646f
-
SHA256
b2234c9c69a5223b572aa4037158ed820b54dfe404659abcb4b1b878fce999e5
-
SHA512
2202f5bfa365cd24c4797d3bf209301cd6042518462432cde35540a56672660176738dc35b0ab52ff2b4581b727893f7aaa68d09f805851c9e17cb2a92f63f4a
-
SSDEEP
3072:4nyO/bIV2eQTy6sBOwRoiWhi67ZB27q8bTIXmCSfF49:M/bIV2eQ+6soZiMi0Z4q8beS
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-