General
-
Target
dd72c081e53b2b8feb0726ed58dc1b3d
-
Size
173KB
-
Sample
240325-g5jwjaab54
-
MD5
dd72c081e53b2b8feb0726ed58dc1b3d
-
SHA1
25d078e22e508bf5f80be5ec69d2b02134ec6a8b
-
SHA256
0e6db69bb537de62bf59d86f1c6b4b9f47ef74fc51bd5c5189d37a611119b5cc
-
SHA512
818a18c32e5dd8a47b7bb482edf44d1bc543f3494da537adffc88486419cf6891d2717475e6700b05592fb0132ffaad96cd1674a00c252050b33662b4fdb02e7
-
SSDEEP
1536:5+L7BtXISH0BVpMNijUJKvRBq2EqIiQmLdhkQOSIIolysxPgC5FKDl0LCK2z0DKc:oXISOCwjUJ+4zmL0QuIM10aLU0DK/et
Static task
static1
Behavioral task
behavioral1
Sample
dd72c081e53b2b8feb0726ed58dc1b3d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dd72c081e53b2b8feb0726ed58dc1b3d.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
pony
http://108.166.65.182:8080/pony/gate.php
http://aloucakbileti.com:8080/pony/gate.php
-
payload_url
http://akradugunsalonlari.com/k0g2Cgr9/nn4hWpH.exe
Targets
-
-
Target
dd72c081e53b2b8feb0726ed58dc1b3d
-
Size
173KB
-
MD5
dd72c081e53b2b8feb0726ed58dc1b3d
-
SHA1
25d078e22e508bf5f80be5ec69d2b02134ec6a8b
-
SHA256
0e6db69bb537de62bf59d86f1c6b4b9f47ef74fc51bd5c5189d37a611119b5cc
-
SHA512
818a18c32e5dd8a47b7bb482edf44d1bc543f3494da537adffc88486419cf6891d2717475e6700b05592fb0132ffaad96cd1674a00c252050b33662b4fdb02e7
-
SSDEEP
1536:5+L7BtXISH0BVpMNijUJKvRBq2EqIiQmLdhkQOSIIolysxPgC5FKDl0LCK2z0DKc:oXISOCwjUJ+4zmL0QuIM10aLU0DK/et
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-