General

  • Target

    43732e8913523b1f23d0574c4edf64ce266bc0f01d17a8ea0fc34e209f9c1ec4

  • Size

    91KB

  • MD5

    07db8cb106384782d0cd3e802fcabed0

  • SHA1

    9e533e6c88584b06f94f43ed04c225891c466a63

  • SHA256

    43732e8913523b1f23d0574c4edf64ce266bc0f01d17a8ea0fc34e209f9c1ec4

  • SHA512

    f8a7657a5184e918cda27f2598c83d0d0e10a91deb62930c60acb7d209d189071d0a9ad78910fe8f793bcdb354bcaf8730c3888501ba6332a8aac82f3d9a4f32

  • SSDEEP

    1536:6t+CukEmJ4qTQwfHgwj1vwlENE5gmQTgOlc6Tvm9kzbg/m:wxDEYfLj1vGuEcgOlBg/m

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://justcreature.com/forum/viewtopic.php

http://justmonster.com/forum/viewtopic.php

http://kalcodistributors.com/forum/viewtopic.php

http://kapcotool.com/forum/viewtopic.php

Attributes
  • payload_url

    http://mobilidea.com.mx/4ME7W3.exe

    http://landhausbakery.com/nNF.exe

    http://www.rethemniotikokarnavali.gr/ZJfMPCJG.exe

Signatures

Files

  • 43732e8913523b1f23d0574c4edf64ce266bc0f01d17a8ea0fc34e209f9c1ec4
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections