pondrat | 6510d460395ca3643133817b40d9df4fa0d9dbe8e60b514fdc2d4e26b567dfbd

Resubmissions

01/11/2025, 21:46

251101-1m3epsfl5v10

25/09/2025, 14:56

250925-sbdm7sbp5110

Sharing

Copy URL Twitter E-mail

General

Target
6510d460395ca3643133817b40d9df4fa0d9dbe8e60b514fdc2d4e26b567dfbd.bin
Size 145KB
Sample251101-1m3epsfl5v
SHA256 6510d460395ca3643133817b40d9df4fa0d9dbe8e60b514fdc2d4e26b567dfbd
MD5 fe0008771a3e5c9c1c789d41ad57d571
SHA1 61d506a4a286e6d13138b7c3ce7866c457d113df
SHA512 4898eaf122884e26d3b9e1ac14ea8bcd530d04685a193c86dd5ada49e36233dd2d930d795c6c77388b27eb88fe8c28c9ddd255781ac2d84cc30940a7bb5d2f63
SSDEEP 3072:lXpLZGidmrvH7c7XNxNyKtk2uMSQ6H0VVlVW:ppdarvbczYa4Mc
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

pondrat discovery

Malware Config

Targets

- Target
  6510d460395ca3643133817b40d9df4fa0d9dbe8e60b514fdc2d4e26b567dfbd.bin
- Size 145KB
- SHA256 6510d460395ca3643133817b40d9df4fa0d9dbe8e60b514fdc2d4e26b567dfbd
- MD5 fe0008771a3e5c9c1c789d41ad57d571
- SHA1 61d506a4a286e6d13138b7c3ce7866c457d113df
- SHA512 4898eaf122884e26d3b9e1ac14ea8bcd530d04685a193c86dd5ada49e36233dd2d930d795c6c77388b27eb88fe8c28c9ddd255781ac2d84cc30940a7bb5d2f63
- SSDEEP 3072:lXpLZGidmrvH7c7XNxNyKtk2uMSQ6H0VVlVW:ppdarvbczYa4Mc
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Downloads MZ/PE file
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Badlisted process makes network request

Downloads MZ/PE file

Executes dropped EXE

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2