General

  • Target

    b05047dd8e545911cbaf9bdbb9084c2ca70fb2a2640b28a749aab6f5c495a693

  • Size

    91KB

  • MD5

    47a83b5a92407bc65e781f5d90901f20

  • SHA1

    04379604df8c3648408807879ec4603cdaa705ab

  • SHA256

    b05047dd8e545911cbaf9bdbb9084c2ca70fb2a2640b28a749aab6f5c495a693

  • SHA512

    c3513da4feb01989fa5cb59a61d4c020b50e86c786042e0f2f0c9c0a62917160f2a933ff0040beabb8b7db129f76e0a7fdd2373127a13bfc6cb527eb81c5316d

  • SSDEEP

    1536:8NTGOmwQr4qTCNgxWBcXhnHb77LCwylxOWcbTvzkzbT/7:aqJwLBcXhX7exOWDT/7

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://thepalms-pd.com/forum/viewtopic.php

http://marzenamelby.com/forum/viewtopic.php

http://minneapolisareareosales.com/forum/viewtopic.php

http://minneapolisforeclosuredeals.com/forum/viewtopic.php

Attributes
  • payload_url

    http://project5.ignitee.com/7rq7.exe

    http://www.inmagonzalez.com/9NMJ.exe

    http://www.seattlewineoutlet.wpinthecloud.com/hkt8t7dA.exe

Signatures

Files

  • b05047dd8e545911cbaf9bdbb9084c2ca70fb2a2640b28a749aab6f5c495a693
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections