General

  • Target

    7c0ab17cf84edc197dfbf90fca78291d837e7fafe477a504fb7d5e7687b948b1

  • Size

    91KB

  • MD5

    5473536f3fbf201ec6c890bd9845c820

  • SHA1

    586f3196b6414f0b127e5d81a6da8d30cee2b1b1

  • SHA256

    7c0ab17cf84edc197dfbf90fca78291d837e7fafe477a504fb7d5e7687b948b1

  • SHA512

    1df529fc979e33e17013baedca8a3abed7f473208d0e6ec2ad9602402f1e5fb5654d0581904fae0f867fc3daf1188d87682e13d3142ebe6abe3e9b86761b5289

  • SSDEEP

    1536:rNOiu0H254qTJVEGB8uMv0dJoxiaNrU5QWgjQOlcyTvvkzbQ/N:BBzHmTC0Pqi048QOlAQ/N

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://onlyidea.com/forum/viewtopic.php

http://originalpizzaplus.ca/forum/viewtopic.php

http://originalpizzaplus.com/forum/viewtopic.php

http://papak.ca/forum/viewtopic.php

Attributes
  • payload_url

    http://0367384.netsolhost.com/6n0J.exe

    http://mlcimaging.com/1CkJvUG.exe

    http://87.106.24.246/kwBamUQu.exe

Signatures

Files

  • 7c0ab17cf84edc197dfbf90fca78291d837e7fafe477a504fb7d5e7687b948b1
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections