General

  • Target

    c9ea551c74ef16f3a17a999006fede2019d5b1ec90aa79e7357b77ad24cd3f21

  • Size

    91KB

  • MD5

    a05f41195b4d992965d77e9d2f225ea0

  • SHA1

    96a53d35f6885f2eff2fa5cd5a4d53d00a01039d

  • SHA256

    c9ea551c74ef16f3a17a999006fede2019d5b1ec90aa79e7357b77ad24cd3f21

  • SHA512

    24532632f789ec433c50404bf1462a1b90d9d2a5abccbba6637d1ca9e0fdd8bc6841a18e5cc204c1d9fb23908bb89ca2e47beccefac43a210bb7daefc4062ce3

  • SSDEEP

    1536:c1wWOiyEsD4qTZX9xM5q/bDZG7eMuxqOJc9TvYkzb+/V:SnV/oM5+XZGmqOJk+/V

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://twincitiesfamilywellness.com/ponyf/gate.php

http://smeadlaw.com/ponyf/gate.php

http://janetmoss.com/ponyf/gate.php

http://jmosswinery.com/ponyf/gate.php

Attributes
  • payload_url

    http://www.salus626.it/9AUKtdw.exe

    http://208.2.139.48/h4AFprQF.exe

    http://pmengineering.planetstudioweb.com/ntLgeUFU.exe

Signatures

Files

  • c9ea551c74ef16f3a17a999006fede2019d5b1ec90aa79e7357b77ad24cd3f21
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections