General

  • Target

    ccc2c81a42a01fe8175c6c5a2e613d7fe4986f3bf87fc13f4fb05ebafa75d61d

  • Size

    91KB

  • MD5

    60eb81789048871d1a0f5738f89df040

  • SHA1

    ac699d0e908a6abe1262d07d3b6db10760313b6a

  • SHA256

    ccc2c81a42a01fe8175c6c5a2e613d7fe4986f3bf87fc13f4fb05ebafa75d61d

  • SHA512

    a0e75998065cb6c5323ed1ffac8f61402f9c62571a51d28148a958a62c2544c4681f0ad89ab91ab7909161994c63f4497e33fa65f0e8325d9bea30912d21b25b

  • SSDEEP

    1536:Tlaa5eAf/M94qTBIngmOMg58dhoRlMT8vUOYcHTvTkzbk/5:Bb5/XouwMia+RFUOY3k/5

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://199.168.184.198:81/ponyf/gate.php

http://116.122.158.195:8080/ponyf/gate.php

http://4renttulsa.com/ponyf/gate.php

http://4rentunitedstates.com/ponyf/gate.php

Attributes
  • payload_url

    http://www.butlerandconcierge.com/DW4s6.exe

    http://208.2.139.48/sGozBy.exe

    http://ftp.navaglia.it/yvWQaSzC.exe

Signatures

Files

  • ccc2c81a42a01fe8175c6c5a2e613d7fe4986f3bf87fc13f4fb05ebafa75d61d
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections