Overview

overview

10

Static

static

10

8FEAE03951...28.exe

windows7_x64

10

8FEAE03951...28.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    8FEAE03951203FBFDF623C8DFADAD2CDC10560BC11E28.exe
  • Size 88KB
  • Sample220224-dma9wsdbej
  • SHA256 8feae03951203fbfdf623c8dfadad2cdc10560bc11e28c1fc134492a764833a6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
pony

Malware Config

Extracted

Family

  • pony

C2

  • http://comune.fuscaldo.cs.it/default.php?p9wsXpAvDfbJSwcgH5xNVQu9faQpYD

  • http://poppahomes.com/default.php?8JLNpZbvuUKkijOwYST5FfS36U3sc8oArUe9s

  • http://illinoisrates.com/default.php?FqrCYZSSXh1rcfqoAUw3BdWUFtgriLeoqa

  • http://waldenserhof-springpferde.de/default.php?DerBMUuhfjqhncHNeqAexgF

  • http://endless.svdownloadurl.com/default.php?SSE3dnJGqh6D4aKuszmV8xkS7C

Signatures

File Explorer

  • 8FEAE03951203FBFDF623C8DFADAD2CDC10560BC11E28.exe
    .exe 88KB

8FEAE03951203FBFDF623C8DFADAD2CDC10560BC11E28.exe

  • IMPHASH 728afd0aeb7539a2a721ececf5f36865
  • SHA256 8feae03951203fbfdf623c8dfadad2cdc10560bc11e28c1fc134492a764833a6
  • MD5 SHA1 SHA512 SSDEEP
windowsx86
Minor OS version
Major OS version
Entry point
65269
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths