General
-
Target
d975d28da57f5275c7171af97e067df2
-
Size
130KB
-
Sample
240320-wn8wnafh2v
-
MD5
d975d28da57f5275c7171af97e067df2
-
SHA1
777d21978a4a13592a9311cdd04f35fd09163f3e
-
SHA256
19607c1d70305cec1aa790215246d082854a5ecabc761ab9777f94f4a40b71a9
-
SHA512
d56c76ca8ef6e261ac17d8d948667c23766bc3c7f315a10be5e45cce5d02cbafdc88b66cad65cd8df3c61d666926b0642ed9165663d83d91f7716f4fd5698239
-
SSDEEP
1536:u+nkXndcrUMHzRc4enj521pBiGOE363UMSIslysxPgFJrf/bcXhgUhYI8+YbYGo8:KXdc/e4ej2OE4UQIurTcxW/fo0DKweL0
Static task
static1
Behavioral task
behavioral1
Sample
d975d28da57f5275c7171af97e067df2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d975d28da57f5275c7171af97e067df2.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
pony
http://108.166.65.182:8080/pony/gate.php
http://aloucakbileti.com:8080/pony/gate.php
-
payload_url
http://akradugunsalonlari.com/k0g2Cgr9/nn4hWpH.exe
http://www.pasiontodoterreno.com/TX0fhdi7/0WNZnF.exe
Targets
-
-
Target
d975d28da57f5275c7171af97e067df2
-
Size
130KB
-
MD5
d975d28da57f5275c7171af97e067df2
-
SHA1
777d21978a4a13592a9311cdd04f35fd09163f3e
-
SHA256
19607c1d70305cec1aa790215246d082854a5ecabc761ab9777f94f4a40b71a9
-
SHA512
d56c76ca8ef6e261ac17d8d948667c23766bc3c7f315a10be5e45cce5d02cbafdc88b66cad65cd8df3c61d666926b0642ed9165663d83d91f7716f4fd5698239
-
SSDEEP
1536:u+nkXndcrUMHzRc4enj521pBiGOE363UMSIslysxPgFJrf/bcXhgUhYI8+YbYGo8:KXdc/e4ej2OE4UQIurTcxW/fo0DKweL0
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-