Analysis
-
max time kernel
32s -
max time network
43s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
-
submitted
23-06-2023 22:55
General
-
Target
Botnets PACK/Botnets PACK/Pony 1.9/sys/WPFToolkit.exe
-
Size
2.1MB
-
MD5
14723ffeebf824bb4f909558c6d4172e
-
SHA1
0a2df5ec2ab106af7c4b71e14bdc8892f0b8bd22
-
SHA256
f20b1ced29f3cf81aa561423363691b2cfc0c48903e0ea2689b230e65b175833
-
SHA512
31b654b4bdb564752866e090f40371b531279f20591a77b99b83d66023a64001a5fe2989a71d61d392ad2a0f59c29d48c4487d79fa4192573fc44a014fb0b51e
-
SSDEEP
49152:ZKsJDwJmBjoPetuYojTuL7QlxaxunCt7gGGOta8Cj1C1LTx1RSuemVlS+U0cj9:ZxJ8JmePceTuvQPauCuGGO1wC1TZSpmH
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\Pony 1.9\sys\WPFToolkit.exe"C:\Users\Admin\AppData\Local\Temp\Botnets PACK\Botnets PACK\Pony 1.9\sys\WPFToolkit.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4704-133-0x0000000000400000-0x0000000000826000-memory.dmpFilesize
4.1MB
-
memory/4704-134-0x0000000002820000-0x0000000002821000-memory.dmpFilesize
4KB
-
memory/4704-135-0x0000000000400000-0x0000000000826000-memory.dmpFilesize
4.1MB
-
memory/4704-136-0x0000000002820000-0x0000000002821000-memory.dmpFilesize
4KB