Overview

overview

10

Static

static

ef11c3f2d2...4d.exe

windows7-x64

10

ef11c3f2d2...4d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef11c3f2d26c7d6a268f3203374218478590e1f66df1b3017de8c96521bde14d

  • Size

    115KB

  • Sample

    221207-de5tjahf43

  • MD5

    f5f15ef86984e567935f2bab02b2cf3c

  • SHA1

    3fb0c5463e2e789587ce113d07931d2d32c22ea5

  • SHA256

    ef11c3f2d26c7d6a268f3203374218478590e1f66df1b3017de8c96521bde14d

  • SHA512

    015347af91fe25dbcea33bbccc4180fa0380178d7c7449fe154c94c046a929962004bdc4b12e60932382c9ec68484b81352f731eacd6069015c7f93f28f02da0

  • SSDEEP

    3072:AuYp/iIR3l+Jl4ZwSLlNBwVhiaMtEo9oceG+XT83ehJo33m18XAU:Hkl+G5Abi1SHcelTBg7

Score
10/10
ponydiscoveryratspywarestealer

Malware Config

Targets

    • Target

      ef11c3f2d26c7d6a268f3203374218478590e1f66df1b3017de8c96521bde14d

    • Size

      115KB

    • MD5

      f5f15ef86984e567935f2bab02b2cf3c

    • SHA1

      3fb0c5463e2e789587ce113d07931d2d32c22ea5

    • SHA256

      ef11c3f2d26c7d6a268f3203374218478590e1f66df1b3017de8c96521bde14d

    • SHA512

      015347af91fe25dbcea33bbccc4180fa0380178d7c7449fe154c94c046a929962004bdc4b12e60932382c9ec68484b81352f731eacd6069015c7f93f28f02da0

    • SSDEEP

      3072:AuYp/iIR3l+Jl4ZwSLlNBwVhiaMtEo9oceG+XT83ehJo33m18XAU:Hkl+G5Abi1SHcelTBg7

    Score
    10/10
    ponydiscoveryratspywarestealer

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks