General

  • Target

    84f1b9bf61e7083db871746612daec6bfac59c46e312f0f6043d582c556e7384

  • Size

    91KB

  • MD5

    561db1f089d136b3ec52308dab2ac250

  • SHA1

    563e620cc28b956cc9637e984d2e602596629752

  • SHA256

    84f1b9bf61e7083db871746612daec6bfac59c46e312f0f6043d582c556e7384

  • SHA512

    b7dea7b82a2e1ef2421fa97982a2063bbec70c060d5509d27bd55de7b1c69d9a44293f30b36e8b20ba0a43332d9bb11ba4d0200009b5c70b36588268f2b470a0

  • SSDEEP

    1536:nLha2znr44qTBsirhYyKzu0uJ+uNf7OpOnc5TvXkzbn/M:LUknTyKqZQ1pOnTn/M

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://hubbywifewines.com/forum/viewtopic.php

http://ipodwalla.com/forum/viewtopic.php

http://jerseycitybags.com/forum/viewtopic.php

http://jerseyluggage.com/forum/viewtopic.php

Attributes
  • payload_url

    http://www.arrow2000.ca/RiQw07Xs.exe

    http://abstain.org.uk/2NkRox.exe

    http://bebecaracas.com/Rxu4Wzo.exe

Signatures

Files

  • 84f1b9bf61e7083db871746612daec6bfac59c46e312f0f6043d582c556e7384
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections