General

  • Target

    fe0351868b37298d60e6870aba71596cae90cb8321f9a71d139c5ba7e9a83aeb

  • Size

    91KB

  • MD5

    16dbd63a200e59a20fdeac54987441f0

  • SHA1

    c7e6b9e7db952d8a670d177a84274f7229ee9715

  • SHA256

    fe0351868b37298d60e6870aba71596cae90cb8321f9a71d139c5ba7e9a83aeb

  • SHA512

    cf13e89569a4be8a9cac3cb3bd151bea31873488f052788f79524e25f01448cad98fa0be8025c8a21364c22d6bdcbbf838f14bb769dd6dd8f044fd593c26209d

  • SSDEEP

    1536:XNOiu0H254qTJVEGB8uMv0dJoxiaNrU5QWgjQOlcyTvvkzbQ/N:dBzHmTC0Pqi048QOlAQ/N

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://onlyidea.com/forum/viewtopic.php

http://originalpizzaplus.ca/forum/viewtopic.php

http://originalpizzaplus.com/forum/viewtopic.php

http://papak.ca/forum/viewtopic.php

Attributes
  • payload_url

    http://0367384.netsolhost.com/6n0J.exe

    http://mlcimaging.com/1CkJvUG.exe

    http://87.106.24.246/kwBamUQu.exe

Signatures

Files

  • fe0351868b37298d60e6870aba71596cae90cb8321f9a71d139c5ba7e9a83aeb
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections