General

  • Target

    ab6f4aebc5e2bce07c5f806fdf0eb829a720141bdad7a8ea46a6218a54d741ad

  • Size

    91KB

  • MD5

    38d46e71a9a8cc52ded9e69b60c66f00

  • SHA1

    09f3171fdb4208467ae0527ad6a76e49610ee9f9

  • SHA256

    ab6f4aebc5e2bce07c5f806fdf0eb829a720141bdad7a8ea46a6218a54d741ad

  • SHA512

    94de7b4dcef7154816d9d308da64f1b1f338a5f8facac8e4b9805fc75d62a188ff3ea9480279a83a829a0d5c404c22123e69b919cfb93ad463763757c43d4271

  • SSDEEP

    1536:FXKjAC3lxTzSqTNDhtL/eVgENMYe+vtYfceZuO2wTvxkzbH/5:FBYlBvr6Mlqt2uO2PH/5

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://116.122.158.195:8080/ponyb/gate.php

http://talentos.clicken1.com:81/ponyb/gate.php

http://panama.clicken1.com:81/ponyb/gate.php

http://monteazul.clicken1.com:81/ponyb/gate.php

Attributes
  • payload_url

    http://bodyakademie.gesundheitslounge.eu/A6vx.exe

    http://btganjramleelasamiti.com/sTYK.exe

    http://applianceservicecoinc.net/M3PR6LH.exe

    http://globalinfocomgroup.com/unG1h6TS.exe

Signatures

Files

  • ab6f4aebc5e2bce07c5f806fdf0eb829a720141bdad7a8ea46a6218a54d741ad
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections