Analysis
-
max time kernel
5s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
01/01/2024, 19:47
General
-
Target
03d49ce319034726d97db567b9fbdd57.exe
-
Size
97KB
-
MD5
03d49ce319034726d97db567b9fbdd57
-
SHA1
0a630339ec179edc35a7e74b231ae6f525b01f0c
-
SHA256
1b55fb9622ee90e30a271551a554c22902a2e9862b28f5c6e893491be2318c10
-
SHA512
d0d08f658e3365ffa86c2d2391df7f23175b819a3273d8b9fb1c2953ded2d79394eb97b7f7227f12c3d2fdf0fc0bef0178f75084274ad6295fbd1422d2404724
-
SSDEEP
3072:Sp7Ho6pzq9OSqC8xp/AKXJ0Lr1Ww1q/BHugcG0c:Sp7JpKOSkaKxwiBHZZ
Score
10/10
Malware Config
Signatures
-
Pony,Fareit
Pony is a Remote Access Trojan application that steals information.
-
Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\03d49ce319034726d97db567b9fbdd57.exe"C:\Users\Admin\AppData\Local\Temp\03d49ce319034726d97db567b9fbdd57.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
112KB
-
Filesize
112KB