General

  • Target

    26fb9ada42b328842287747f6ffa89668c3fa16ee95ea553514cabaae8d1d7dd

  • Size

    127KB

  • MD5

    58e5d974b5c8311d0e208e8caebb99e0

  • SHA1

    65319e06e3a329774cc675db01dc131801ea692e

  • SHA256

    26fb9ada42b328842287747f6ffa89668c3fa16ee95ea553514cabaae8d1d7dd

  • SHA512

    b9c97954f579a812e25b1241ebcfd3bef1cccf3ebd137e0af7563e084b8750f51a61ca798f3d7c9b24a13ebea5ae7d21b8b91fb9e0276654e0c0cbb9b9575d68

  • SSDEEP

    1536:RjBGqS5DVqTiPDYzXDQQqDSNlBWbt5eRjDZWLjuOVCwTvi3pYaqkzb5FP/zXqFiE:n1+D6PqOLc5e51OVC9PP/zaFiB1+B5

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://veronefosof.com/gate.php

http://fohenroprab.com/gate.php

http://redesparda.com/gate.php

Attributes
  • payload_url

    http://www.grupom7.com/wp-content/plugins/feedweb_data/k1.exe

    http://structuralhealth.net/wp-content/plugins/feedweb_data/k1.exe

    http://www.educa-accion.cl/wp-content/plugins/feedweb_data/k1.exe

    http://www.webintegration.nl/wp-content/plugins/feedweb_data/k1.exe

    http://truckservicesorlando.com/wp-content/plugins/feedweb_data/k1.exe

Signatures

Files

  • 26fb9ada42b328842287747f6ffa89668c3fa16ee95ea553514cabaae8d1d7dd
    .exe windows x86

    10d5e7ff9b81180a7ac24d91449df9bf


    Headers

    Imports

    Sections