General

  • Target

    908-58-0x0000000000400000-0x0000000000419000-memory.dmp

  • Size

    100KB

  • MD5

    52ed703d4264e6c0b2054895b1a74504

  • SHA1

    6b3a256e80e6ce542b25458c4c241d282d24b84b

  • SHA256

    220b5ebaa619f50d6bc8e96a99b807572ab96be28e7e531fbc06dfd1265c9a28

  • SHA512

    071fbcb5a1ef86422fa8678a0bbec913b589b1a0ca6e917fbc7c0d80cd4bc738e52e102103b793e9b913bec7ae823e8e236de2c007a0eba8bf9fd60a55a53c9c

  • SSDEEP

    1536:UnSn0nSncgyGqTDRXmGcwSCfZDalZNg9tvo0iO3AX4ApTvMEI9kzmt2l:2SnWSnMuGc/CfZDap6COU45EIxtm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://www.mxgaming.com/pp/gate.php

Attributes
  • payload_url

    http://www.mxgaming.com/cxvcdfs/exit.exe

Signatures

Files

  • 908-58-0x0000000000400000-0x0000000000419000-memory.dmp
    .exe windows x86


    Headers

    Sections