General

  • Target

    2685d9e98f6a0216c28a3bc17b21849580fc37f9b351abdd9cf9aab57a6df1ed.exe

  • Size

    84KB

  • MD5

    009aef3fc495cd2f1ebb6789f7009e4e

  • SHA1

    64c633e0af7ae1e313a15a33ac470aa5baa44ad7

  • SHA256

    2685d9e98f6a0216c28a3bc17b21849580fc37f9b351abdd9cf9aab57a6df1ed

  • SHA512

    a173038fb17aab61e5f8be7e72b6e4bbce38f65c344af0e4212d0e60f6b49d9ce10dc8e1547a5ce5d3a365de45d96e8166c02b10a616462930435d75387dae23

  • SSDEEP

    1536:zneDiPVmIqT5HmLN7uD7kkmnz941vexsTvDkzbc/lsq:TIsVmFQUD7kS1vexZc/lsq

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://caitymccardell.com/wp-content/upd.php

http://childrensranchpdc.com/wp-content/upd.php

http://teach4god.com/blog/wp-content/upd.php

Attributes
  • payload_url

    http://bealkalinenow.com/wp-content/fe/1.exe

    http://bealkalinenow.com/wp-content/fe/2.exe

    http://bealkalinenow.com/wp-content/fe/3.exe

Signatures

Files

  • 2685d9e98f6a0216c28a3bc17b21849580fc37f9b351abdd9cf9aab57a6df1ed.exe
    .exe windows x86

    458c5838d791dc0cd56eb79db7bd9334


    Headers

    Imports

    Sections