General
-
Target
d5d22d3b10235b465d6bc6713423a6c3
-
Size
119KB
-
Sample
240319-lx49qagh54
-
MD5
d5d22d3b10235b465d6bc6713423a6c3
-
SHA1
47212f85f40e69a0e9b00ede8269daea8ca9cefc
-
SHA256
4233a945fc82e82cf4c88a70364eaa42b9d31aa1f44fd3bf587a4676ce426043
-
SHA512
a6595092ea1c3f62c358a970ce5800ed97f0ee2a0798d4b218479700ba23daddd46f42356002cf9bfaaf8d503245c434beddae16b9d7de13a9b479da6ff8e33e
-
SSDEEP
3072:VPZo6YRvhs2p3Dmf4MPmHf8LJzWfq23SeC:1hytpz44BH0Eq2W
Static task
static1
Behavioral task
behavioral1
Sample
d5d22d3b10235b465d6bc6713423a6c3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5d22d3b10235b465d6bc6713423a6c3.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
pony
http://nazarian.pl:8080/pony/gate.php
http://pbx.pc0.ru:8080/pony/gate.php
-
payload_url
http://www.lovetaoyuan.com/v7a47NA.exe
http://legacy.com.gr/X23cM6f.exe
http://fvdproducciones.com/zFK.exe
Targets
-
-
Target
d5d22d3b10235b465d6bc6713423a6c3
-
Size
119KB
-
MD5
d5d22d3b10235b465d6bc6713423a6c3
-
SHA1
47212f85f40e69a0e9b00ede8269daea8ca9cefc
-
SHA256
4233a945fc82e82cf4c88a70364eaa42b9d31aa1f44fd3bf587a4676ce426043
-
SHA512
a6595092ea1c3f62c358a970ce5800ed97f0ee2a0798d4b218479700ba23daddd46f42356002cf9bfaaf8d503245c434beddae16b9d7de13a9b479da6ff8e33e
-
SSDEEP
3072:VPZo6YRvhs2p3Dmf4MPmHf8LJzWfq23SeC:1hytpz44BH0Eq2W
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-