General

  • Target

    06078872dfed1f6f98fd02926689b59fa42e9654ca7a70a85e92cc2baf2bdbe7

  • Size

    91KB

  • MD5

    82880063a058c2099ae8d6f706086cd0

  • SHA1

    564405beeb22efd05ede4e6e9481be5b84018367

  • SHA256

    06078872dfed1f6f98fd02926689b59fa42e9654ca7a70a85e92cc2baf2bdbe7

  • SHA512

    1a1ade49e073850b88ce20d47630178ad7203896f65db29ffa00209a082bd31d7004a3af714910c8372457fbe61a2def5a5ddeeb438854fd60ad959e01f10a89

  • SSDEEP

    1536:ZTFi54nT/E4qTHiZm8RT/+aaeLMhD/SsOvcMTvGkzbj/D:Rw5CTA8Rb3aeDsOvdj/D

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://ammsatlanta.com/forum/viewtopic.php

http://ammsboston.com/forum/viewtopic.php

http://ammscanada.com/forum/viewtopic.php

http://ammschicago.com/forum/viewtopic.php

Attributes
  • payload_url

    http://project5.ignitee.com/7rq7.exe

    http://www.inmagonzalez.com/9NMJ.exe

    http://www.seattlewineoutlet.wpinthecloud.com/hkt8t7dA.exe

Signatures

Files

  • 06078872dfed1f6f98fd02926689b59fa42e9654ca7a70a85e92cc2baf2bdbe7
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections