General

  • Target

    b5cbee3e3ee06d5aaaf0ab8a9b8c904864c6a5c31e19cdd3c49c1f007ece6d7a

  • Size

    91KB

  • MD5

    04670b64987b0f2d5760cd9ebbea2c90

  • SHA1

    e53a9a46ce4e46a30109ffdcfef70ac836851f27

  • SHA256

    b5cbee3e3ee06d5aaaf0ab8a9b8c904864c6a5c31e19cdd3c49c1f007ece6d7a

  • SHA512

    06008f549c1b31f28c262ab22742f42d30e5415e8a41b31430170cdf30a8428665c5be2c7efaf83cf3c071e860b79d305af9596d8d53dfcc6933374aecc3081a

  • SSDEEP

    1536:sNliu0wql4qTJgbGu1a9+D4r0fQQWgjbOacMpTvrkzbF/l:egzw60a9+4ofZbOan6F/l

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://thinkgreensupply.com/forum/viewtopic.php

http://pacificcontractsources.com/forum/viewtopic.php

http://50shadesofshades.com/forum/viewtopic.php

http://50shadesofsunshades.com/forum/viewtopic.php

Attributes
  • payload_url

    http://www.mbbd.it/4zZ.exe

    http://win.centrostudiathena.com/32qr.exe

    http://covariosocialtest2.com/YoHX253.exe

    http://grandns.net/WFHqQ0t1.exe

Signatures

Files

  • b5cbee3e3ee06d5aaaf0ab8a9b8c904864c6a5c31e19cdd3c49c1f007ece6d7a
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections