General

  • Target

    2d6e0b0c238e2377d4557116af8b8bec72abc22464b863b55abd337cf21e9ca6

  • Size

    34KB

  • MD5

    5376076de2432d3b173a8cd8650c5e9b

  • SHA1

    956bc8f5ff2a6c04a662b0567e597bbc58862b9f

  • SHA256

    2d6e0b0c238e2377d4557116af8b8bec72abc22464b863b55abd337cf21e9ca6

  • SHA512

    aed99bf206163736e9dcb189bbd4c34bac9cb261dfa3ff945555fa30475e8196f612c4e6cd39678eaf1f8fcad04659a8ee1ca66e33d46f8903507c051ce214be

  • SSDEEP

    768:mebIFTipO74y41XbpIzwLMFsT5QQGQC4FgfK:L0wpOUFXbezdTrQNFgC

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://osundefoundations.com/n/Panel/gate.php

Attributes
  • payload_url

    http://osundefoundations.com/n/Panel/ma.exe

Signatures

  • Pony family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 2d6e0b0c238e2377d4557116af8b8bec72abc22464b863b55abd337cf21e9ca6
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections