General

  • Target

    500454df4886817c66d4430d00ca28fe3bc0509f1fdd5e0863a151e50c591109.exe

  • Size

    89KB

  • MD5

    0f239c39870792d5601e9cb8d13282d2

  • SHA1

    222c934753f608665fab9367bd37ff83d9e492a1

  • SHA256

    500454df4886817c66d4430d00ca28fe3bc0509f1fdd5e0863a151e50c591109

  • SHA512

    b5b73442c79869165c02f0cccb9635ac647a09588be2af203e8c36a99b624ab534ce5ecfbd86509a5f7db07f44eb85ab8772201c368489971f657915aae478de

  • SSDEEP

    1536:2rZQ3gHqTi5bU3Ld1/KT+lu5S3nQOosrwTvJEAukzZe:CZHOLd1STqMOodEABe

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://4.professionalsoft.com/ponyb/gate.php

http://4.promatika.com/ponyb/gate.php

Attributes
  • payload_url

    http://doorway.co/eRY0kp.exe

    http://actia.pl/FcNa.exe

    http://k2steel.com/iCq7.exe

    http://aktibbicihazlar.com/ttya.exe

    http://assulapia.com/cAvbh.exe

Signatures

Files

  • 500454df4886817c66d4430d00ca28fe3bc0509f1fdd5e0863a151e50c591109.exe
    .exe windows x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections