Overview

overview

10

Static

static

10

8848f05f17...83.exe

windows7-x64

10

8848f05f17...83.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8848f05f1734ac50061d99f1d16e3d4ef46a5d64137eca1b9883003aeb501383

  • Size

    91KB

  • MD5

    49f5c87e7cc4fd6cb1062f06f8f81b70

  • SHA1

    1af1903c373507724f92d618198c3388a6cd3acd

  • SHA256

    8848f05f1734ac50061d99f1d16e3d4ef46a5d64137eca1b9883003aeb501383

  • SHA512

    61eb741620c6983a2ff46aab237d458961d44755845665fe7da13ab7afbf7ce2b2bc11fb034606414d95371a4f0d71aa9744329d89ef0d68a07402af9bfff402

  • SSDEEP

    1536:alCa+4S0V4qTBiaeR0tPNV3+K/krUXXOocz3Tv5kzbc/d:QVHSYvtPPOKnXOoBc/d

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://living-alive.net/ponyf/gate.php

http://myroad2recovery.com/ponyf/gate.php

http://newplacespace.com/ponyf/gate.php

http://spirulini.com/ponyf/gate.php
Attributes
  • payload_url

    http://www.butlerandconcierge.com/DW4s6.exe

    http://208.2.139.48/sGozBy.exe

    http://ftp.navaglia.it/yvWQaSzC.exe

Signatures

Files

  • 8848f05f1734ac50061d99f1d16e3d4ef46a5d64137eca1b9883003aeb501383
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections