General

  • Target

    76e56f851edaf48ef3c971ece74b63f8d39ea549b1f0492cdfd660a9d9d2b386

  • Size

    91KB

  • MD5

    1040af65529183a48ec05c95c76b0d90

  • SHA1

    7107d6f7e4476000358020731fb001a3fb65574f

  • SHA256

    76e56f851edaf48ef3c971ece74b63f8d39ea549b1f0492cdfd660a9d9d2b386

  • SHA512

    f91a52b2eac08e2a9136e28b878461a92643c25fec7de8a874d13b7a568af640d721adb6823d8886ed7dcd4258ac392d959ac12b7851af64e94f442594bb62d8

  • SSDEEP

    1536:09GCu8luh4qTkV5VlXHZJPVYBYeo7IOFcTpTvkikkzb4/e:GJrl1lX57YEIOFOB4/e

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://oliviagurun.com/forum/viewtopic.php

http://onecable.ca/forum/viewtopic.php

http://onlyidea.com/forum/viewtopic.php

http://originalpizzaplus.ca/forum/viewtopic.php

Attributes
  • payload_url

    http://mlcimaging.com/1CkJvUG.exe

    http://87.106.24.246/kwBamUQu.exe

    http://www.rethemniotikokarnavali.gr/ZJfMPCJG.exe

Signatures

Files

  • 76e56f851edaf48ef3c971ece74b63f8d39ea549b1f0492cdfd660a9d9d2b386
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections