General

  • Target

    29d2de5147b8b331b1ae2236848c3dcd247e6e9641a617abe8c352acb8154729

  • Size

    91KB

  • MD5

    040b85f5fba14795864fa6f4d4422f40

  • SHA1

    8dcfccb30241bbda90766083422143dedb2f3caa

  • SHA256

    29d2de5147b8b331b1ae2236848c3dcd247e6e9641a617abe8c352acb8154729

  • SHA512

    aae440a1811b24346a26cebb2da6fa7ae0b0614cf47d7c439af2acd975c28adbc76c1361f6d56cebbca99fe780aa272cbf93e0fe790d87fe402016e4d0e057d9

  • SSDEEP

    1536:YNOiu0H254qTJVEGB8uMv0dJoxiaNrU5QWgjQOlcyTvvkzbQ/N:KBzHmTC0Pqi048QOlAQ/N

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://onlyidea.com/forum/viewtopic.php

http://originalpizzaplus.ca/forum/viewtopic.php

http://originalpizzaplus.com/forum/viewtopic.php

http://papak.ca/forum/viewtopic.php

Attributes
  • payload_url

    http://0367384.netsolhost.com/6n0J.exe

    http://mlcimaging.com/1CkJvUG.exe

    http://87.106.24.246/kwBamUQu.exe

Signatures

Files

  • 29d2de5147b8b331b1ae2236848c3dcd247e6e9641a617abe8c352acb8154729
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections