General
-
Target
debdb525bf56212d7d951a22215367e0
-
Size
127KB
-
Sample
240326-kj8vbaed55
-
MD5
debdb525bf56212d7d951a22215367e0
-
SHA1
fa64c64b5d833a284808bb9a31c886e13c0d0704
-
SHA256
95b59ef096e24e28534ab1788671a8c044539d4f5d28a3ed5d3d36e81b3d4415
-
SHA512
69a5e63f1456e4bd49b0bf5a2cab2c019279ba25c9921fbef6e1c0d123fd88c98af5da6ee18fd5209197cb598f7eaf50e36f4c0297d52daa8317552a9ec3dd55
-
SSDEEP
1536:X+xV0ht8Yzk0UyRIDJV3/1veMciKZ4m2sd99SIvlysxPgIbNKCzQaWSITr80y:phufGmDJxeZ449/9hjzYZn80y
Static task
static1
Behavioral task
behavioral1
Sample
debdb525bf56212d7d951a22215367e0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
debdb525bf56212d7d951a22215367e0.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
pony
http://37.59.66.237/pony/gate.php
-
payload_url
http://ftp.irpiniaoggi.it/iztD.exe
http://www.w3haus.com.br/28wio.exe
Targets
-
-
Target
debdb525bf56212d7d951a22215367e0
-
Size
127KB
-
MD5
debdb525bf56212d7d951a22215367e0
-
SHA1
fa64c64b5d833a284808bb9a31c886e13c0d0704
-
SHA256
95b59ef096e24e28534ab1788671a8c044539d4f5d28a3ed5d3d36e81b3d4415
-
SHA512
69a5e63f1456e4bd49b0bf5a2cab2c019279ba25c9921fbef6e1c0d123fd88c98af5da6ee18fd5209197cb598f7eaf50e36f4c0297d52daa8317552a9ec3dd55
-
SSDEEP
1536:X+xV0ht8Yzk0UyRIDJV3/1veMciKZ4m2sd99SIvlysxPgIbNKCzQaWSITr80y:phufGmDJxeZ449/9hjzYZn80y
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-