General

  • Target

    MiPony.rar

  • Size

    17.4MB

  • MD5

    4563405e2654af79a14e3643581a221d

  • SHA1

    b2d3e6f56db9fa8c1d0cf72087c27c8699ae1b13

  • SHA256

    d23750c0ebf6cf7009b3317f28933d69d538bead97cc5916e1ef3c1a3eb2a013

  • SHA512

    9d8dfa183f05ac4cd0e1b328ba72bb778c5a23e887d3686b7824552dbc7ba758ba76ff4cdb986c46c03e8dd1b256e7a31ea6d2c1813f6790e25c4bdf8a60f527

  • SSDEEP

    393216:PLPkbYZplHy2AJDYtPSMAkjCH8jKh38xOkJE3oHvDwwtONAloSRqRy:P7kbYBV2lMADEKoLwAxlnUY

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • MiPony.rar
    .rar
  • MiPony/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MiPony/FFmpeg.exe
    .exe windows:4 windows x86 arch:x86

    fc23b5da97ec23813074d3d73953756e


    Headers

    Imports

    Sections

  • MiPony/GalaSoft.MvvmLight.Extras.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MiPony/GalaSoft.MvvmLight.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MiPony/HtmlAgilityPack.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MiPony/Jurassic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MiPony/KRBTabControl.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MiPony/Language/mipony_ar-EG.xml
  • MiPony/Language/mipony_bg-BG.xml
  • MiPony/Language/mipony_bn-IN.xml
  • MiPony/Language/mipony_bs-Latn-BA.xml
  • MiPony/Language/mipony_ca-VA.xml
  • MiPony/Language/mipony_ca.xml
  • MiPony/Language/mipony_cs-CZ.xml
    .xml
  • MiPony/Language/mipony_da-DK.xml
    .xml
  • MiPony/Language/mipony_de-DE.xml
  • MiPony/Language/mipony_el.xml
  • MiPony/Language/mipony_en-US.xml
  • MiPony/Language/mipony_es-AR.xml
  • MiPony/Language/mipony_es-ES.xml
  • MiPony/Language/mipony_es-MX.xml
  • MiPony/Language/mipony_es-VE.xml
  • MiPony/Language/mipony_eu-ES.xml
    .xml
  • MiPony/Language/mipony_fa-IR.xml
  • MiPony/Language/mipony_fr-FR.xml
  • MiPony/Language/mipony_gl-ES.xml
  • MiPony/Language/mipony_he-IL.xml
  • MiPony/Language/mipony_hr-HR.xml
    .xml
  • MiPony/Language/mipony_hu-HU.xml
  • MiPony/Language/mipony_id-ID.xml
  • MiPony/Language/mipony_it-IT.xml
  • MiPony/Language/mipony_ja-JP.xml
  • MiPony/Language/mipony_km-KH.xml
  • MiPony/Language/mipony_ko-KR.xml
  • MiPony/Language/mipony_lt-LT.xml
  • MiPony/Language/mipony_mr-IN.xml
    .xml
  • MiPony/Language/mipony_nl-NL.xml
  • MiPony/Language/mipony_pl-PL.xml
  • MiPony/Language/mipony_pt-BR.xml
  • MiPony/Language/mipony_pt-PT.xml
  • MiPony/Language/mipony_ro-RO.xml
  • MiPony/Language/mipony_ru-RU.xml
    .xml
  • MiPony/Language/mipony_sk-SK.xml
  • MiPony/Language/mipony_sr-Cyrl-CS.xml
  • MiPony/Language/mipony_tr-TR.xml
  • MiPony/Language/mipony_vi.xml
  • MiPony/Language/mipony_zh-CHS.xml
  • MiPony/Language/mipony_zh-HK.xml
  • MiPony/Language/mipony_zh-TW.xml
  • MiPony/Microsoft.Practices.ServiceLocation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MiPony/Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MiPony/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MiPony/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • MiPony/Microsoft.WindowsAPICodePack.Shell.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MiPony/Microsoft.WindowsAPICodePack.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MiPony/Mipony.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • MiPony/Mono.Nat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MiPony/System.Windows.Interactivity.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MiPony/boost_chrono-vc120-mt-1_55.dll
    .dll windows:6 windows x86 arch:x86

    df91de869a2eacc96e16506b0d3cdaf4


    Headers

    Imports

    Exports

    Sections

  • MiPony/boost_date_time-vc120-mt-1_55.dll
    .dll windows:6 windows x86 arch:x86

    807a8873dea4c04426be4926bae6218e


    Headers

    Imports

    Exports

    Sections

  • MiPony/boost_system-vc120-mt-1_55.dll
    .dll windows:6 windows x86 arch:x86

    a3419715be727852ae059cb359fe2e14


    Headers

    Imports

    Exports

    Sections

  • MiPony/boost_thread-vc120-mt-1_55.dll
    .dll windows:6 windows x86 arch:x86

    95c6e1ebfdf2461712b49fc43348817a


    Headers

    Imports

    Exports

    Sections

  • MiPony/libtorrentwp.dll
    .dll windows:6 windows x86 arch:x86

    75add34d6056f4eb1cbbae692bcd1a12


    Headers

    Imports

    Sections

  • MiPony/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MiPony/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MiPony/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:5 windows x86 arch:x86

    608537c42a46a95b31cc1ef01ab6eeb0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MiPony/sigdb4.bin
  • MiPony/torrent.dll
    .dll windows:6 windows x86 arch:x86

    e5de2c9e0775f39a9d8c47c3fc9e1d7c


    Headers

    Imports

    Exports

    Sections

  • MiPony/uninst.exe
    .exe windows:4 windows x86 arch:x86

    7eae418c7423834ffc3d79b4300bd6fb


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • MiPony/unrar.dll
    .dll windows:5 windows x86 arch:x86

    327af171c73523da5a912080c2fb8cfc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • MiPony/unrar64.dll
    .dll windows:5 windows x64 arch:x64

    5e508847b67de29d8dce90c821788287


    Code Sign

    Headers

    Imports

    Exports

    Sections