General

  • Target

    700-65-0x0000000000400000-0x0000000000419000-memory.dmp

  • Size

    100KB

  • MD5

    03beda497ac5aa60491ac29295d2d53c

  • SHA1

    fa02b67ab44b39c4f3ab612455ea996b7eee0bb1

  • SHA256

    4faf1b1e5a7295cf63feaed0d16d5374e7f7204288e14e9174738ea2ed460126

  • SHA512

    6a63b6279901c66434f6fc175ed9827e12415854997dd341186e56aabc70acd6b0fbd49015d4affcf326de4344090db732cb805e405dd84f6a7e199bcb180415

  • SSDEEP

    1536:UnSn0nSncgyGqTDRXmGcwSCfZDalZNg9tvo0iO3AX4ApTvMEIMkzmt2l:2SnWSnMuGc/CfZDap6COU45EIAtm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://synclogs.com/clue/gate.php

Attributes
  • payload_url

    http://synclogs.com/clue/shit.exe

Signatures

Files

  • 700-65-0x0000000000400000-0x0000000000419000-memory.dmp
    .exe windows x86


    Headers

    Sections