Overview

overview

10

Static

static

10

a136d4f8f1...01.exe

windows7-x64

10

a136d4f8f1...01.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a136d4f8f1efcb2e3163f91a08eb11d7e6fc7a877ba035605bfa60baa5b25601

  • Size

    34KB

  • MD5

    8d4faa31b5b0527c9cbfe94ceddf0af4

  • SHA1

    90425ea6a22d4a2a6000b6208edb1358d9bd7939

  • SHA256

    a136d4f8f1efcb2e3163f91a08eb11d7e6fc7a877ba035605bfa60baa5b25601

  • SHA512

    435dc54ba7ead763e3a686303c43baae52bd1b488dc4d426bbe54737dc4e41849426100dc1080c87f26fd24f946438b792c484a65166aa1b9d48f240299d9e9f

  • SSDEEP

    768:Jb2h9zZgDvBzksosaUOoFKmQI69aAffid+xhwj+X/1gIPAS:JSh9EpzSfUvKmQIiaAfKkTc+XtZn

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://1.ministryofvapes.com/Panel/gate.php

Attributes
  • payload_url

    http://1.ministryofvapes.com/Panel/Pony.exe

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • a136d4f8f1efcb2e3163f91a08eb11d7e6fc7a877ba035605bfa60baa5b25601
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections