General

  • Target

    faa5497f82e6abdbbd28f5fe76fb877703621c44d5a9e3b7fedd3b1b075f7d87.exe

  • Size

    160KB

  • Sample

    241218-m989wawnhs

  • MD5

    673694cae2fdc3c72fad528d85ca9b2e

  • SHA1

    36d53f69fecb97b8af02799e5914bcfa3bede1c5

  • SHA256

    faa5497f82e6abdbbd28f5fe76fb877703621c44d5a9e3b7fedd3b1b075f7d87

  • SHA512

    7952e7d0a9d89dfa44ec2fc1bd8e644da87dc5cf06748c925a1b646da2e6f5abeb22190c230618a29236c4eadf66b638f370fa8df18b28bc12438b4ab1c275d7

  • SSDEEP

    3072:o1bP6o0UWGiCY2P8rQ6FUAgqxaIYAc01vF6woq6wEh:o1W4WGg2POQ6mAgqxQAcWvFfoLBh

Malware Config

Extracted

Family

pony

C2

http://akamaifilms.com:81/pony/gate.php

http://alliedtitanium.com:81/pony/gate.php

Attributes
  • payload_url

    http://www.swa-trading.com.sg/nMsB3YqY/qh0LBj.exe

    http://www.eventakustik.de/qEA7g4k5/xmk6kFQT.exe

    http://www.studiobernasconipaghe.it/Y6MVPfVk/vHMKQXb.exe

    http://apostagol.com.br/KU02WYrx/ftBD4.exe

Targets

    • Target

      faa5497f82e6abdbbd28f5fe76fb877703621c44d5a9e3b7fedd3b1b075f7d87.exe

    • Size

      160KB

    • MD5

      673694cae2fdc3c72fad528d85ca9b2e

    • SHA1

      36d53f69fecb97b8af02799e5914bcfa3bede1c5

    • SHA256

      faa5497f82e6abdbbd28f5fe76fb877703621c44d5a9e3b7fedd3b1b075f7d87

    • SHA512

      7952e7d0a9d89dfa44ec2fc1bd8e644da87dc5cf06748c925a1b646da2e6f5abeb22190c230618a29236c4eadf66b638f370fa8df18b28bc12438b4ab1c275d7

    • SSDEEP

      3072:o1bP6o0UWGiCY2P8rQ6FUAgqxaIYAc01vF6woq6wEh:o1W4WGg2POQ6mAgqxQAcWvFfoLBh

    • Pony family

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

    • Accesses Microsoft Outlook accounts

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.