General

  • Target

    25f469dbfdbdd25cc2f0e3974932ac3a5bd9d710eabc40bbeffbf76202d65acd

  • Size

    91KB

  • MD5

    9129a3313c5ef60be2e1b2e8388a17e0

  • SHA1

    7ca58c5d6741ca3f85e1d082c2180070e15dc297

  • SHA256

    25f469dbfdbdd25cc2f0e3974932ac3a5bd9d710eabc40bbeffbf76202d65acd

  • SHA512

    b8f364e2392e5b0c0a11077a91193d465da22fc9bfa90236014d54555e3d112c12ac173682893ffccd9b80bd5a3fab23087e5ddd40484636332407a33e74cecb

  • SSDEEP

    1536:jj+i2v+TY4qTCPDohi/s3qEmTvFTZD573aSO9cOTvskzbC/a:XR4+T/s3qt9ZMSO9RC/a

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://rooftilesupply.com/forum/viewtopic.php

http://shinglesupply.com/forum/viewtopic.php

http://slatesupply.com/forum/viewtopic.php

http://solarroofingsupply.com/forum/viewtopic.php

Attributes
  • payload_url

    http://www.mbbd.it/4zZ.exe

    http://win.centrostudiathena.com/32qr.exe

    http://covariosocialtest2.com/YoHX253.exe

    http://grandns.net/WFHqQ0t1.exe

Signatures

Files

  • 25f469dbfdbdd25cc2f0e3974932ac3a5bd9d710eabc40bbeffbf76202d65acd
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections