General

  • Target

    54d5060261d02cb3a778d00fb43a57bba502c72f80361fce9e897fb433c09758

  • Size

    91KB

  • MD5

    71846f9cb265a816afc9c2e36311f680

  • SHA1

    58dad8f023ed73267b0751d2c701d194ea0beb28

  • SHA256

    54d5060261d02cb3a778d00fb43a57bba502c72f80361fce9e897fb433c09758

  • SHA512

    1873c9d04b8bf006c8d1cd15e9b7631f975289ef8b5a4a0940fb6e795e9566cbca83c8932de156f91ea1b97c223a9ac80e7cd4aba34045ddbdd5b66fea4fadcf

  • SSDEEP

    1536:wLx6Cz9BkC9Mmo4qTPOHCnOfzJfKKmEcdvreIOHcQDTvtykzb3/L:gECPZ9MR8zJSnE3IOHBR3/L

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://lesperancerenovations.com/forum/viewtopic.php

http://louievozza.com/forum/viewtopic.php

http://louvozza.com/forum/viewtopic.php

http://lv-contracting.com/forum/viewtopic.php

Attributes
  • payload_url

    http://mlcimaging.com/1CkJvUG.exe

    http://87.106.24.246/kwBamUQu.exe

    http://www.rethemniotikokarnavali.gr/ZJfMPCJG.exe

Signatures

Files

  • 54d5060261d02cb3a778d00fb43a57bba502c72f80361fce9e897fb433c09758
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections