General
-
Target
7beecf324629b5a4bfcebb9490187d3f839ecc50220b25919df5dc6a2f7dcf58
-
Size
2.4MB
-
Sample
230627-a1yessce63
-
MD5
a58cd5a51cd7d5e93bdc9cf2e93409f9
-
SHA1
56e93d0506a5fe0f5017eea5061a13f55fbb7bfb
-
SHA256
7beecf324629b5a4bfcebb9490187d3f839ecc50220b25919df5dc6a2f7dcf58
-
SHA512
b9402bb849bedcef6d4b31c0aebb1d835f064af5f9f2766696755b06e14fb3a487779fb6f5f5bcda85f5ff26826590ac791d0b69e4b1843b857957c4a012fec2
-
SSDEEP
24576:F2OTeFxvKLuoucZybHXMDg2cQV09aoz25OVn3GuQ5Y3h3js9sKvVehGgjzBlveML:bTux6ZT0sozGK3Ns9sKNehG0eM1J
Static task
static1
Behavioral task
behavioral1
Sample
7beecf324629b5a4bfcebb9490187d3f839ecc50220b25919df5dc6a2f7dcf58.exe
Resource
win7-20230621-en
Malware Config
Extracted
pony
http://dare2dreamz.com:8080/pony/gate.php
http://cityweddingguide.com:8080/pony/gate.php
-
payload_url
http://dynolite.eu/7U0ASvP9/AZz.exe
http://pixllme.com/JodJY0uf/hvZ.exe
http://redman.com.br/zqDQMaNF/SRivXt.exe
Targets
-
-
Target
7beecf324629b5a4bfcebb9490187d3f839ecc50220b25919df5dc6a2f7dcf58
-
Size
2.4MB
-
MD5
a58cd5a51cd7d5e93bdc9cf2e93409f9
-
SHA1
56e93d0506a5fe0f5017eea5061a13f55fbb7bfb
-
SHA256
7beecf324629b5a4bfcebb9490187d3f839ecc50220b25919df5dc6a2f7dcf58
-
SHA512
b9402bb849bedcef6d4b31c0aebb1d835f064af5f9f2766696755b06e14fb3a487779fb6f5f5bcda85f5ff26826590ac791d0b69e4b1843b857957c4a012fec2
-
SSDEEP
24576:F2OTeFxvKLuoucZybHXMDg2cQV09aoz25OVn3GuQ5Y3h3js9sKvVehGgjzBlveML:bTux6ZT0sozGK3Ns9sKNehG0eM1J
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-