General

  • Target

    a10c3bfe6ec572a6ee7e7d7c4746dbe4d21cc42eff22ebcbe1b4d264dac9982cN.exe

  • Size

    170KB

  • Sample

    250117-q3ctwa1kgk

  • MD5

    1455d5431dc6600def4549dcaa1011d0

  • SHA1

    a2d18f11ae0c93faa7034ec68da66fefa9b0fb8c

  • SHA256

    a10c3bfe6ec572a6ee7e7d7c4746dbe4d21cc42eff22ebcbe1b4d264dac9982c

  • SHA512

    8c1211d45fbbd8a08618acd2bebe4c1b99d73c5c3efd382689bd17f7877e8a4dedac4f7837650c7e20891d75daec18dab2010186228b2146479df094f0b1ce84

  • SSDEEP

    1536:aEbXnP6dMPE/wp56KhEQE+fmbZNqzWcerICT/kbuf9HSLK83ak6UI9AKFGJuZA:rCep56oE5+fmbzzczuftSLP3sUIiKcD

Malware Config

Targets

    • Target

      a10c3bfe6ec572a6ee7e7d7c4746dbe4d21cc42eff22ebcbe1b4d264dac9982cN.exe

    • Size

      170KB

    • MD5

      1455d5431dc6600def4549dcaa1011d0

    • SHA1

      a2d18f11ae0c93faa7034ec68da66fefa9b0fb8c

    • SHA256

      a10c3bfe6ec572a6ee7e7d7c4746dbe4d21cc42eff22ebcbe1b4d264dac9982c

    • SHA512

      8c1211d45fbbd8a08618acd2bebe4c1b99d73c5c3efd382689bd17f7877e8a4dedac4f7837650c7e20891d75daec18dab2010186228b2146479df094f0b1ce84

    • SSDEEP

      1536:aEbXnP6dMPE/wp56KhEQE+fmbZNqzWcerICT/kbuf9HSLK83ak6UI9AKFGJuZA:rCep56oE5+fmbzzczuftSLP3sUIiKcD

    • Pony family

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks