General

  • Target

    3efc115c3f95d30b5fc994ac2c5b2bc87124953fd35a11a593846615e93683c2

  • Size

    80KB

  • MD5

    f1e13cc362ac395f27a7b24c133f8df6

  • SHA1

    ad5151f7cd5526b25e023bc2abe90351c41438a7

  • SHA256

    3efc115c3f95d30b5fc994ac2c5b2bc87124953fd35a11a593846615e93683c2

  • SHA512

    4772f49fbf0585bec741e61a347bf807a629101cfe26d3e1799ad99bcddf56a2ebf8a93655c82b1198aa4ba3d5e718c30e7589f94ad339288bed182264c3bcac

  • SSDEEP

    1536:glUM4fAgwqTVrxitJoBg/LCyHJCEm2YMnLwTstkZmvV7h+:1MW6wKLCuJRLwTs+mvV7h

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://zinwebtrustx.in/ifr/z.php?ftp=1

http://homesoft-eq.in/ifr/z.php?ftp=1

http://netstart-cloudx.in/ifr/z.php?ftp=1

http://fastscan-evo.in/ifr/z.php?ftp=1

Signatures

  • Pony family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 3efc115c3f95d30b5fc994ac2c5b2bc87124953fd35a11a593846615e93683c2
    .exe windows x86


    Headers

    Sections