General

  • Target

    9d2bb3af59ba6ccd1941e02c34a793557dc0c50f027758de0ad89c077ef65d47

  • Size

    91KB

  • MD5

    377e1cb129992c1bdb3ab57d6ca76c60

  • SHA1

    9ad222339766a69231d1dfa7d633b37e3f9ccc04

  • SHA256

    9d2bb3af59ba6ccd1941e02c34a793557dc0c50f027758de0ad89c077ef65d47

  • SHA512

    5c8817fbd995be3037c5f881d1d80aa4cd4fce220436656a431f6d194c8b08411fb48ff38131e4fd330e145d966eb87885884acda4a9adc2a24858059699a8ff

  • SSDEEP

    1536:qVYGu65074qTzqArkPQ9tUKGyW7f92EmZDO5cPTviCkzb2/9:Ufd5e9yK/yfYDO5/2/9

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://utahonlinerealestate.com/forum/viewtopic.php

http://defeat-autism.com/forum/viewtopic.php

http://defeat-autism.org/forum/viewtopic.php

http://jadecreditdesign.com/forum/viewtopic.php

Attributes
  • payload_url

    http://game.portal.kg/eSjwp.exe

    http://87.106.24.246/kwBamUQu.exe

    http://www.rethemniotikokarnavali.gr/ZJfMPCJG.exe

Signatures

Files

  • 9d2bb3af59ba6ccd1941e02c34a793557dc0c50f027758de0ad89c077ef65d47
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections