Overview

overview

10

Static

static

10

69ff873217...68.exe

windows7_x64

10

69ff873217...68.exe

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    69ff8732173d5e24f543bf6190f1a9143a91355b93d5a80f55587f1868ed4968.exe
  • Size 88KB
  • Sample220514-q5mf4acddk
  • SHA256 69ff8732173d5e24f543bf6190f1a9143a91355b93d5a80f55587f1868ed4968
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
pony

Malware Config

Extracted

Family

  • pony

C2

  • http://comune.fuscaldo.cs.it/default.php?w3kWNTZVZsbrWSu1qLiMz4BGdefdEb

  • http://poppahomes.com/default.php?OneQDmfn4Vs2vlhXJa5FoZfFe1y93xOtqEJHz

  • http://illinoisrates.com/default.php?PYeZNWDQjN2qNSClMOtNubM1xooCp2tixB

  • http://waldenserhof-springpferde.de/default.php?yTrSseoSJDg2Q7NRpO55suE

  • http://endless.svdownloadurl.com/default.php?d6ziFSWy45sJQcqgpS4qZr4RSw

Signatures

File Explorer

  • 69ff8732173d5e24f543bf6190f1a9143a91355b93d5a80f55587f1868ed4968.exe
    .exe 88KB

69ff8732173d5e24f543bf6190f1a9143a91355b93d5a80f55587f1868ed4968.exe

  • IMPHASH 728afd0aeb7539a2a721ececf5f36865
  • SHA256 69ff8732173d5e24f543bf6190f1a9143a91355b93d5a80f55587f1868ed4968
  • MD5 SHA1 SHA512 SSDEEP
windowsx86
Minor OS version
Major OS version
Entry point
65269
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths