Overview

overview

10

Static

static

10

d30f68de94...9b.exe

windows7_x64

10

d30f68de94...9b.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d30f68de942230f770c1ba98b6210ab3f4df162c329416335c4a3b608913059b.exe

  • Size

    91KB

  • MD5

    3e1c8315789762b75a84c82c572a16fc

  • SHA1

    03d5193ae7192053c9fe1ceb562a12981fd3fbf0

  • SHA256

    d30f68de942230f770c1ba98b6210ab3f4df162c329416335c4a3b608913059b

  • SHA512

    05422ecece43c79361b9f28275d6834ed6878c7ab74e9fbdc8915c32e491ab90d48db00d6311aafc689b3796da5a87fec1492c825f929994d4e7f653b2958ca2

  • SSDEEP

    1536:3LBa2TOLk4qTzSCUjAeI51euu7et/buLOnclFTvbkzbO/4Sb:70EOFBAeI2b7lLOnKeO/Z

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://berkshirehathawayalamoheights.com/ponyf/gate.php

http://berkshirehathawayboerne.com/ponyf/gate.php

http://berkshirehathawaybulverde.com/ponyf/gate.php

http://berkshirehathawaycanyonlake.com/ponyf/gate.php
Attributes
  • payload_url

    http://128.121.242.173/4Ctnc8R.exe

    http://www.salus626.it/9AUKtdw.exe

    http://208.2.139.48/h4AFprQF.exe

Signatures

Files

  • d30f68de942230f770c1ba98b6210ab3f4df162c329416335c4a3b608913059b.exe
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections