General
-
Target
2e4a_dump.exe_.exe
-
Size
90KB
-
Sample
230720-dk6m1scd89
-
MD5
b4f8726cfa4a3cc8313f11d01d7f234f
-
SHA1
00e3193f0d3d9bc211fe80007400d7dfa967177f
-
SHA256
ba4c0ef0209abd10274480fc3ae8cd4ba74287625c18e01e67dee204b4ca7eb0
-
SHA512
1f15e505e951d5bd10369b4aa0bff49131c8106ffe1b0496fa58faff566bd78f215a5f4e92582444c697e2ca95f6bbcf77204418c149089882aba99c2bede0a4
-
SSDEEP
1536:onSncgyGqTDRXmGcwSCfZDalZNg9tvo0iO3AX4ApTvMEIkkzmt2l:CSnMuGc/CfZDap6COU45EIotm
Behavioral task
behavioral1
Sample
2e4a_dump.exe_.exe
Resource
win7-20230712-en
Malware Config
Extracted
pony
http://hawkresultbox.net/code/nam/gate.php
-
payload_url
http://hawkresultbox.net/code/nam/shit.exe
Targets
-
-
Target
2e4a_dump.exe_.exe
-
Size
90KB
-
MD5
b4f8726cfa4a3cc8313f11d01d7f234f
-
SHA1
00e3193f0d3d9bc211fe80007400d7dfa967177f
-
SHA256
ba4c0ef0209abd10274480fc3ae8cd4ba74287625c18e01e67dee204b4ca7eb0
-
SHA512
1f15e505e951d5bd10369b4aa0bff49131c8106ffe1b0496fa58faff566bd78f215a5f4e92582444c697e2ca95f6bbcf77204418c149089882aba99c2bede0a4
-
SSDEEP
1536:onSncgyGqTDRXmGcwSCfZDalZNg9tvo0iO3AX4ApTvMEIkkzmt2l:CSnMuGc/CfZDap6COU45EIotm
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-