Overview

overview

10

Static

static

10

e048fd66b0...48.exe

windows7-x64

10

e048fd66b0...48.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e048fd66b0712f7a8033068908a5b211ebd8d1af41e274d824fef56554bfeb48

  • Size

    91KB

  • MD5

    9230ca316947d04d969a3359d7fec480

  • SHA1

    bd2ead58306847dd854c7e22a0a2746a37932396

  • SHA256

    e048fd66b0712f7a8033068908a5b211ebd8d1af41e274d824fef56554bfeb48

  • SHA512

    43dda21514d6bd032bb7efe08a16673da8ae5728536646a5d0ab44a6fdd51a0171a54657be6e37da23d8b9a19415540466750b20cf7db94faca94b6d9285d50b

  • SSDEEP

    1536:JLCa2zpVFE4qTkmLM5mU1o8MhIKcjWvzNf7OuO4c9MTvtkzbu/ePm:5Vkpdpo8MqKAIMuO4CZu/b

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://checkpoint-friendly-travel-accessories.com/ponyf/gate.php

http://checkpointbackpacks.com/ponyf/gate.php

http://checkpointfriendlybusinesscases.com/ponyf/gate.php

http://checkpointfriendlylaptopcases.com/ponyf/gate.php
Attributes
  • payload_url

    http://www.salus626.it/9AUKtdw.exe

    http://208.2.139.48/h4AFprQF.exe

    http://pmengineering.planetstudioweb.com/ntLgeUFU.exe

Signatures

Files

  • e048fd66b0712f7a8033068908a5b211ebd8d1af41e274d824fef56554bfeb48
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections