General

  • Target

    1932-60-0x0000000000400000-0x0000000000419000-memory.dmp

  • Size

    100KB

  • MD5

    75a2c3b2ae3a7ec1684893bc40870cf4

  • SHA1

    1c9a25ec55283f465bc2c37d5423008bcc2f0a2e

  • SHA256

    e8401121d7a492725bd806bea45af162a4af0edd290308d19aff333f979b958c

  • SHA512

    1ddba3631dbb8523c2e7d1070e5d0733b2b9b23f51ff211cd24b3166a20a24f42a50c6a3126c4db1f62d79fd749358d8b5f37401a3fc5fc279be73296c2d4a8d

  • SSDEEP

    1536:UnSn0nSncgyGqTDRXmGcwSCfZDalZNg9tvo0iO3AX4ApTvMEIKkzmt2l:2SnWSnMuGc/CfZDap6COU45EIytm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://ricepaperscissors.com.au/pony/panel/gate.php

Attributes
  • payload_url

    http://ricepaperscissors.com.au/pony/panel/shit.exe

Signatures

Files

  • 1932-60-0x0000000000400000-0x0000000000419000-memory.dmp
    .exe windows x86


    Headers

    Sections