General

  • Target

    237090a05b54e8dc99189b427567c560cc9d27a353b713d181716217adfa522c

  • Size

    34KB

  • MD5

    76c18a5519236a6c48aa53f495ec7ad7

  • SHA1

    438fb0b398aca22cd3928feef9d487e8e9de7b8c

  • SHA256

    237090a05b54e8dc99189b427567c560cc9d27a353b713d181716217adfa522c

  • SHA512

    637cd3f35e9c35e10babcb78b3f0d1490fd5804529ba6931f9227bc27ac824cfed0c2b289d52bd3628751862b0dee356737165c2c305fb54046274094dc07f46

  • SSDEEP

    384:a2ZR3eABDzy93AWZgqnOs5D6XdpreAWWYb19+xu9bHSlMijBNcj//31yLrr+PPbx:f73bla93t8G4Y/bNHSlxXcpM3+7nMU

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://192.163.227.127/it/gate.php

http://starcentres.com/logo14673.gif

Signatures

  • Pony family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 237090a05b54e8dc99189b427567c560cc9d27a353b713d181716217adfa522c
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections