Overview

overview

10

Static

static

10

ba8dba8810...8f.exe

windows7-x64

10

ba8dba8810...8f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ba8dba88104a3a571b1982e13cd553a06998d48147178a6338590c6368e6a58f

  • Size

    91KB

  • MD5

    42521b1ab081c57d92464d6f7a7535d0

  • SHA1

    1246222f4931c0060ed999dd1cd232da29edc6fc

  • SHA256

    ba8dba88104a3a571b1982e13cd553a06998d48147178a6338590c6368e6a58f

  • SHA512

    1f381f3dfced15e5a001a63a36618db062fa296a8dc835d7a8a8e2819219a7b9f5286200819faec0cf7c0e97bfa3bf1bede775229747b9bc18cce2505b7ba2f0

  • SSDEEP

    1536:Gj5qgi2Sbj44qTK47pXldtpV42JZbXsyOncXTvvkzbi//:a2ZbolldD22QyOnpi//

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://116.122.158.195:8080/ponyd/gate.php

http://4rentcoloradosprings.com/ponyd/gate.php

http://4rentcolumbus.com/ponyd/gate.php

http://4rentconnecticut.com/ponyd/gate.php
Attributes
  • payload_url

    http://www.samico.de/7Votu5Mu.exe

    http://diagnostic-kits.com/ch2.exe

    http://azadcollege.com/V8AzAG.exe

    http://idyno.com.au/3qK5K9p7.exe

    http://southfloridaclimatechange.org/cP2ojUp4.exe

Signatures

Files

  • ba8dba88104a3a571b1982e13cd553a06998d48147178a6338590c6368e6a58f
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections