Overview

overview

10

Static

static

e4b620724a...de.exe

windows7-x64

10

e4b620724a...de.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e4b620724a8a0b1feb3bf2d56597200e286878fc493dd7702e027441dc8da9de

  • Size

    92KB

  • Sample

    221207-dffk2ahf62

  • MD5

    01241bb65724eec0608f50f8fff18d23

  • SHA1

    9a1eff63d9f288e9bf4689907ac3b2f5e13ea278

  • SHA256

    e4b620724a8a0b1feb3bf2d56597200e286878fc493dd7702e027441dc8da9de

  • SHA512

    9622fa87a07ae9731aa9764d064262de052ba271c078a5ead2b79ce117bfd84a149a647c2aff0e07742e0c9393303ed08fe622dda9951c9d2c454f96d4a9331e

  • SSDEEP

    1536:jqCX1Nj+uKxV2iykH5RsjqbWR3c6mnXG9aGRo49c6jSULc7yon50KRw5PyyIyWoR:jq0AzxVpK0znXG9aGRX+6+Uen6KRwlxj

Score
10/10
ponydiscoveryratspywarestealer

Malware Config

Targets

    • Target

      e4b620724a8a0b1feb3bf2d56597200e286878fc493dd7702e027441dc8da9de

    • Size

      92KB

    • MD5

      01241bb65724eec0608f50f8fff18d23

    • SHA1

      9a1eff63d9f288e9bf4689907ac3b2f5e13ea278

    • SHA256

      e4b620724a8a0b1feb3bf2d56597200e286878fc493dd7702e027441dc8da9de

    • SHA512

      9622fa87a07ae9731aa9764d064262de052ba271c078a5ead2b79ce117bfd84a149a647c2aff0e07742e0c9393303ed08fe622dda9951c9d2c454f96d4a9331e

    • SSDEEP

      1536:jqCX1Nj+uKxV2iykH5RsjqbWR3c6mnXG9aGRo49c6jSULc7yon50KRw5PyyIyWoR:jq0AzxVpK0znXG9aGRX+6+Uen6KRwlxj

    Score
    10/10
    ponydiscoveryratspywarestealer

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks