General

  • Target

    e88638307a10536d64047f646413cee09605bd2642a0bf7a4f0d3dd0998017e6

  • Size

    83KB

  • MD5

    23d244854b25249562e11f803f680b43

  • SHA1

    7d7aa396c3e6054d0328d9447ee8aa619d40f2f6

  • SHA256

    e88638307a10536d64047f646413cee09605bd2642a0bf7a4f0d3dd0998017e6

  • SHA512

    899c146ee26cee517a64e0fabf32af713a56425b1b112325758bc94bc8854a27f2714857d89eac1be7beabc9a43ce5143208f638966ddaed32bcf10d69077b88

  • SSDEEP

    1536:jqtpIYgqT9NFBKUYu4fwwdVnfcBjjcdFGTOT42npE5SkzmOJ:OzhBKUF4fwwHcBjLOfpE5KOJ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://gastricoutletobstruction.com/wp-panel/gate.php

http://peppermintbark.org/wp-panel/gate.php

Attributes
  • payload_url

    http://gastricoutletobstruction.com/wp-panel/flash_container.exe

    http://peppermintbark.org/wp-panel/flash_container.exe

Signatures

Files

  • e88638307a10536d64047f646413cee09605bd2642a0bf7a4f0d3dd0998017e6
    .exe windows x86

    d777357137fc148884e24f774b09e366


    Headers

    Imports

    Sections