Overview

overview

10

Static

static

10

4409b58995...69.exe

windows7-x64

10

4409b58995...69.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4409b589959de9b0f0bc818ca837c875d8eeb54afcbe7ff4a54282e13614cd69

  • Size

    91KB

  • MD5

    843dfb961d3411aeae6829b1481d7c50

  • SHA1

    830805aa257e32a1a0b20cec2e692101a10bfa05

  • SHA256

    4409b589959de9b0f0bc818ca837c875d8eeb54afcbe7ff4a54282e13614cd69

  • SHA512

    960e28e4caef90fa02ff2e278d0a3eff18ac93a317a6aee274ce4a8b086f6612d4a44d5f0497cbe29070b84b4e6384f028e1946e6f0ea06efc011267eb85b541

  • SSDEEP

    1536:QTli2H09k4qTBmSS4thbBYgPiKTFD8BSfy9O6cDTvFkzbD/3:YQQ0GmS1bBY/yFDa9O6bD/3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://bagdup.com/ponyf/gate.php

http://baggagereviews.com/ponyf/gate.php

http://bagpreview.com/ponyf/gate.php

http://bagpreviews.com/ponyf/gate.php
Attributes
  • payload_url

    http://www.salus626.it/9AUKtdw.exe

    http://208.2.139.48/h4AFprQF.exe

    http://pmengineering.planetstudioweb.com/ntLgeUFU.exe

Signatures

Files

  • 4409b589959de9b0f0bc818ca837c875d8eeb54afcbe7ff4a54282e13614cd69
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections