Overview

overview

10

Static

static

10

880-69-0x0...ry.exe

windows7-x64

8

880-69-0x0...ry.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    880-69-0x0000000000400000-0x0000000001400000-memory.dmp

  • Size

    16.0MB

  • MD5

    b63b87f946db78be6984d5181fc0ef35

  • SHA1

    f3561afb07ba58f25d53441b821bf8b1f0d8717b

  • SHA256

    ae37740a6f334b0df25726130a82a1c4d7d4488564086ccc374345eed793c06e

  • SHA512

    a97aefe95626908df51113c2513daae5112c81a2631b859a73be4f3f27c9551659d661cccbb3ab3d23b7ac0295ddd0f8b41f144b928278f3c05edf5f4567be94

  • SSDEEP

    1536:31CNBBcbswqTDbZ5f1K5cYC/fQwRxs/YnhCCWO9J6pTvMEIwkzmLM7L:FCN0bwf0YfQw8AiOzEIMLM7L

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://urvesh.net63.net/pony/Panel/gate.php

Attributes
  • payload_url

    http://urvesh.net63.net/pony/Panel/pony.exe

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 880-69-0x0000000000400000-0x0000000001400000-memory.dmp
    .exe windows x86


    Headers

    Sections