General

  • Target

    5fbf0cf61e5010f80ec3eb231f2eb56dfd557ce1b708da4a776748762ff3cb7f

  • Size

    91KB

  • MD5

    06bf2ea80e40cab1ebfc471bb840aa30

  • SHA1

    375a2f002c999e78eabadcf20843ef552d629250

  • SHA256

    5fbf0cf61e5010f80ec3eb231f2eb56dfd557ce1b708da4a776748762ff3cb7f

  • SHA512

    8769f12eb322cb1d507eddb4f82963ee0d6b4c2af20e42adfcbe91b98a43a86efbb9a9a2ee196d89c491667886a406e7cf55e3d98e42e67c4e01fba18d69426e

  • SSDEEP

    1536:D9GCu8luh4qTkV5VlXHZJPVYBYeo7IOFcQpTvtkkzb4/e:pJrl1lX57YEIOF7B4/e

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://dennisreid.us/forum/viewtopic.php

http://dennissellsdowntown.com/forum/viewtopic.php

http://dennissellsgateway.com/forum/viewtopic.php

http://justinreid.us/forum/viewtopic.php

Attributes
  • payload_url

    http://www.arrow2000.ca/RiQw07Xs.exe

    http://abstain.org.uk/2NkRox.exe

    http://bebecaracas.com/Rxu4Wzo.exe

Signatures

Files

  • 5fbf0cf61e5010f80ec3eb231f2eb56dfd557ce1b708da4a776748762ff3cb7f
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections