Overview

overview

10

Static

static

10

3844-142-0...ry.exe

windows7-x64

8

3844-142-0...ry.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3844-142-0x0000000000400000-0x0000000001400000-memory.dmp

  • Size

    16.0MB

  • MD5

    b607a4797cc13855f8f0b03bbfcb014a

  • SHA1

    8dded07261320cd527cc0ba4f1b53b02264dd407

  • SHA256

    28f2ae16e3bdfe82ab113d9152b6691e719eb8a8cdba3bba7283b65c29e591af

  • SHA512

    9ead8032e73fae1dd9ac9c124ae741087612ef42fa716467ea3727e919b568c896ffd1574eed5fe211343d2dc94700b0d838e6461ca45cbbc497c1fc221cb8c2

  • SSDEEP

    1536:W1PVwEzWqTOEMgqF/stx+25H68jydhPEoo9JSQxOGmZTvQEArkzmXrLlY:WFL9wktH5Hve7PEPjOaEATXrL

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://66.23.230.72/ucheghana2/ourpanels/gate.php

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 3844-142-0x0000000000400000-0x0000000001400000-memory.dmp
    .exe windows x86


    Headers

    Sections