Overview

overview

10

Static

static

10

68ae2aa17c...29.exe

windows7_x64

10

68ae2aa17c...29.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68ae2aa17c2e13a2835d6ac134cdb7f1d9e4bb5bd41c0ca76cbffaed758adc29.exe

  • Size

    91KB

  • MD5

    b3c3360d6e54c2426443f431ee9ce080

  • SHA1

    1cc0d296ae40d866da9cb9c3ac11c34f3e6dc82f

  • SHA256

    68ae2aa17c2e13a2835d6ac134cdb7f1d9e4bb5bd41c0ca76cbffaed758adc29

  • SHA512

    cb3efdc6d9f70c6f6b877caa622eba45d55786215ac576030269a2a2e01e839c0dab9ecb4d8c744875e169da0949fd78e6ebd978210ba3e55f36633519cd93cd

  • SSDEEP

    1536:5PfWgJVQ7RgQm4qT3CT4vj/xE664AInRNA6OXc3TvYkzbh/Y:VOKQ7RgNj/C6tAP6OX8h/Y

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://slatesupply.com/ponyf/gate.php

http://solarroofingsupply.com/ponyf/gate.php

http://thinkgreensupply.com/ponyf/gate.php

http://pacificcontractsources.com/ponyf/gate.php
Attributes
  • payload_url

    http://www.salus626.it/9AUKtdw.exe

    http://208.2.139.48/h4AFprQF.exe

    http://pmengineering.planetstudioweb.com/ntLgeUFU.exe

Signatures

Files

  • 68ae2aa17c2e13a2835d6ac134cdb7f1d9e4bb5bd41c0ca76cbffaed758adc29.exe
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections