Overview

overview

10

Static

static

10

fb9a1f2ec0...ba.exe

windows7-x64

10

fb9a1f2ec0...ba.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fb9a1f2ec0e27027de1be98b774297d3f39e4cabeabe695e7a6328369a0d82ba

  • Size

    92KB

  • MD5

    3e72025e45ec0d2b926e15fa0c1de01d

  • SHA1

    8a3d7c43d38e9ca953c7119e81613f2fb2c6f9c4

  • SHA256

    fb9a1f2ec0e27027de1be98b774297d3f39e4cabeabe695e7a6328369a0d82ba

  • SHA512

    414c4c606b19ebdbe8fa3ecfd17e13a47069d473d42ba92705f716843a46d1e48327e3cc6d3e08d5ef7fb73bd6b1c29aeb4396d275d9d180cf841b1b704f0e3b

  • SSDEEP

    1536:3SKNUvaqT/G5l30budtVlZT4/JOatLmuafhTvwEASkZtZn+:3bkElESVlZk/U7+EARtZn+

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://88.85.99.44:8080/pony/gate.php

http://91.121.140.103:8080/pony/gate.php

http://91.121.178.156:8080/pony/gate.php
Attributes
  • payload_url

    http://www.stablerkraemer.at/15Psv3zJ/4ah6NuS.exe

    http://www.grupozear.es/5PYpsVTJ/mPt0Zx.exe

    http://backurkyzmechu.com/ecffpc9g/BzKb9E.exe

Signatures

Files

  • fb9a1f2ec0e27027de1be98b774297d3f39e4cabeabe695e7a6328369a0d82ba
    .exe windows x86

    24372f561e1e1d10d855a874a39472c3


    Headers

    Imports

    Sections