Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

ba242180eb...da.exe

windows7-x64

10

ba242180eb...da.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba242180ebad14656b66c630661370a02e5ae1bb1dd2d411748e1de849e7e7da

  • Size

    93KB

  • Sample

    221206-b1w3eafd74

  • MD5

    234389196e67b104fedfde394e2acada

  • SHA1

    7491b5ee5cc66e9e582d42e4effe10093f3fd3cf

  • SHA256

    ba242180ebad14656b66c630661370a02e5ae1bb1dd2d411748e1de849e7e7da

  • SHA512

    b49d94009390ea140a1173a95f3955e228a056619f1736f15c043cc348cfa277873bd467062c4a5488863a4af0c75e1eec2e8caac97a5115e106d561b17f2c38

  • SSDEEP

    1536:RZcWsPsu7eBUSpikR3/yL3BtgPFmZ6XJfRRSfJ+GuSackiL:RZcAZHikB/ywPFmZGJfWJOB1

Score
10/10
ponydiscoveryratspywarestealer

Malware Config

Targets

    • Target

      ba242180ebad14656b66c630661370a02e5ae1bb1dd2d411748e1de849e7e7da

    • Size

      93KB

    • MD5

      234389196e67b104fedfde394e2acada

    • SHA1

      7491b5ee5cc66e9e582d42e4effe10093f3fd3cf

    • SHA256

      ba242180ebad14656b66c630661370a02e5ae1bb1dd2d411748e1de849e7e7da

    • SHA512

      b49d94009390ea140a1173a95f3955e228a056619f1736f15c043cc348cfa277873bd467062c4a5488863a4af0c75e1eec2e8caac97a5115e106d561b17f2c38

    • SSDEEP

      1536:RZcWsPsu7eBUSpikR3/yL3BtgPFmZ6XJfRRSfJ+GuSackiL:RZcAZHikB/ywPFmZGJfWJOB1

    Score
    10/10
    ponydiscoveryratspywarestealer

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • Deletes itself

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks