General

  • Target

    827c0152017256f4026e83b6c95df22e3e09c06a24fd8326e16af9725d1dfcc3

  • Size

    91KB

  • MD5

    4fb0368b42fdf5af82dd4bc34eab80e0

  • SHA1

    7416a6468791704c1cb7e0df9ee1919b0f707174

  • SHA256

    827c0152017256f4026e83b6c95df22e3e09c06a24fd8326e16af9725d1dfcc3

  • SHA512

    42628f62242d2ff6422fb9460ee3312a42f07848609675f73103c9f2d7544b5e7c8ef2ec31687ff743fdee97db877e789224d153859fbe02dc0b16cbed92b43a

  • SSDEEP

    1536:OvcGO5gVO4qTXb96nq1niI2/CZV9n4bSrVhEwOEcOTvEkzbY/GPm:CTWgm6nqII2KZHn4b9wOEVY/z

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://116.122.158.195:8080/ponyd/gate.php

http://4rentillinois.com/ponyd/gate.php

http://4rentindianapolis.com/ponyd/gate.php

http://4rentiowa.com/ponyd/gate.php

Attributes
  • payload_url

    http://www.samico.de/7Votu5Mu.exe

    http://diagnostic-kits.com/ch2.exe

    http://azadcollege.com/V8AzAG.exe

    http://idyno.com.au/3qK5K9p7.exe

    http://southfloridaclimatechange.org/cP2ojUp4.exe

Signatures

Files

  • 827c0152017256f4026e83b6c95df22e3e09c06a24fd8326e16af9725d1dfcc3
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections