e9cea398f88cd4cd166b53f03a4c7c29cecd24f201f65f0792c8772a47f4b9e7

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20/04/2024, 08:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Pony_2.2_Panel___Builder.exe
Size

2.7MB
MD5

f19e4e2ddd7464fcc0ba2e1bdb4ca82d
SHA1

4136dd709fb039ae6f9236a10ae0fff0b4accab0
SHA256

e9cea398f88cd4cd166b53f03a4c7c29cecd24f201f65f0792c8772a47f4b9e7
SHA512

6f161910c80ebaedbfe8c409df30afa305bd0d28e1afb7e3bfcf7d610f721ca0d7520456867ea28140db76df493d277a16a9aa1545cc390206581b3128c9e008
SSDEEP

49152:nJqsnG2te8eChV1n3kXwPSLzBZG2LaCDNd+nKS0MvAk5aAs52/r8PAhdepzoE:JxnBtZeC3bP2ZG2LakN0f0M4kYAsQ/rI

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	Pony_2.2_Panel___Builder.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
912	Pony_2.2_Panel___Builder.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
912	Pony_2.2_Panel___Builder.exe
912	Pony_2.2_Panel___Builder.exe

C:\Users\Admin\AppData\Local\Temp\Pony_2.2_Panel___Builder.exe
"C:\Users\Admin\AppData\Local\Temp\Pony_2.2_Panel___Builder.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:912

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads