Overview

overview

10

Static

static

10

763ab8acc6...03.exe

windows7-x64

10

763ab8acc6...03.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    763ab8acc6424ff628099a26447127087076369839a7b50b13f5d8f448189303

  • Size

    91KB

  • MD5

    910e377bdff24eb6cdfff6f6e2ad51a0

  • SHA1

    a44805cc9e30cbf40d30dffe01faa54f55305c02

  • SHA256

    763ab8acc6424ff628099a26447127087076369839a7b50b13f5d8f448189303

  • SHA512

    3ae89e298e8aef824f349a65fd213e560fdbe366b219e79efa8681b7cb7ece74478c665650cfc8b344244cc4544a6ecdc2e3b41720da142640b35e593d73bb07

  • SSDEEP

    1536:HlCa+4S0V4qTBiaeR0tPNV3+K/krUXXOocV3TvAkzbc/d:FVHSYvtPPOKnXOo4c/d

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://supportquilting.com/ponyf/gate.php

http://eaglebay-eb5.com/ponyf/gate.php

http://eaglebay5.com/ponyf/gate.php

http://wcaband.org/ponyf/gate.php
Attributes
  • payload_url

    http://www.butlerandconcierge.com/DW4s6.exe

    http://panachetechsolutions.com/njaKK.exe

    http://208.2.139.48/sGozBy.exe

Signatures

Files

  • 763ab8acc6424ff628099a26447127087076369839a7b50b13f5d8f448189303
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections