General

  • Target

    c3c3c664d5a3f9e1d8303e2c597b339dce0c4e45d920e91f4de3eb48e90af11b

  • Size

    91KB

  • MD5

    544fdb0e9fb4d2744ae1cae0a8682c40

  • SHA1

    ea06b9fc4a374a2aab1a75d30a72f7b56964bbae

  • SHA256

    c3c3c664d5a3f9e1d8303e2c597b339dce0c4e45d920e91f4de3eb48e90af11b

  • SHA512

    e036aa92753b3b73f4965568c02ef47b75d4a2282c2343c9793c5657d327854ab7af10e6f6cefefc8f3d49cb0219cbd0e8b8bdf10d37c8ae6121efd055bcac6e

  • SSDEEP

    1536:Wf7WOhBjq4qTBjJLMCeVt0StdXIDc5MrObac3Tvdkzbl/3:qiOBqNeVOQdXerOenl/3

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://oliviagurun.com/forum/viewtopic.php

http://onecable.ca/forum/viewtopic.php

http://onlyidea.com/forum/viewtopic.php

http://originalpizzaplus.ca/forum/viewtopic.php

Attributes
  • payload_url

    http://0367384.netsolhost.com/6n0J.exe

    http://mlcimaging.com/1CkJvUG.exe

    http://87.106.24.246/kwBamUQu.exe

Signatures

Files

  • c3c3c664d5a3f9e1d8303e2c597b339dce0c4e45d920e91f4de3eb48e90af11b
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections