General

  • Target

    bbf93503774a0e6049d2a61aa43ddb8b0937b2596eec3530cad7f7edc0fcb88f

  • Size

    90KB

  • MD5

    68fe8a45ad1557804c25cc0067f37f84

  • SHA1

    ac29899f02e6af646ba49b2f1675414401f5f439

  • SHA256

    bbf93503774a0e6049d2a61aa43ddb8b0937b2596eec3530cad7f7edc0fcb88f

  • SHA512

    fc88756c93892bcf34440468ebdbd0d4541f4ce4c6ebc25781351b63d89e8556a288eca6122c66962b25b8b8f8487fe65834ee6e53c768369e54294d4d2c9016

  • SSDEEP

    1536:dBSpq6PrJ8bqTV9Mhd8uYCYuk72UCZ93tEbRLOnYQTvgEAmkzmAe:XSp1CbhdDYCJkaHZtAOY5EA2Ae

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://top-glenyx.com/ppnngrr/gate.php

http://marinzer-3.com/ppnngrr/gate.php

http://amerillia.net/ppnngrr/gate.php

http://matterix-net.net/ppnngrr/gate.php

Attributes
  • payload_url

    http://www.huelsmann-treppen.de/js/devils1.exe

Signatures

Files

  • bbf93503774a0e6049d2a61aa43ddb8b0937b2596eec3530cad7f7edc0fcb88f
    .exe windows x86

    8ccde584db2b33df6901142bba965604


    Headers

    Imports

    Sections