General

  • Target

    cd732bad42f322cf31ffceb0dcf4fcebbf205ec532a30fb3de4ea61985ed2ff4

  • Size

    91KB

  • MD5

    3c7b42ee724d62b320275ebd133d31c3

  • SHA1

    d09f504b50a4b1006e4188603e584b450ea69dfc

  • SHA256

    cd732bad42f322cf31ffceb0dcf4fcebbf205ec532a30fb3de4ea61985ed2ff4

  • SHA512

    3394029e3a0087ca4db0cefbf215bd148f29c26f3b8d05dd5a447703af22cf470b92fb56a33060025dd43ca2cc4eca3b1cc277b10ec684e75fb2c7cab1fda25e

  • SSDEEP

    1536:UlKK+wSgaN4qT8978rdTTJIyeBQtcSsfkOVcLTvWRkzbVi/q:WtPFDsdTFOBQ4kOVq0/q

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://luxluggage.com/forum/viewtopic.php

http://luxrebags.com/forum/viewtopic.php

http://luxrybags.com/forum/viewtopic.php

http://luxurybrandswalla.com/forum/viewtopic.php

Attributes
  • payload_url

    http://mobilidea.com.mx/4ME7W3.exe

    http://landhausbakery.com/nNF.exe

    http://www.rethemniotikokarnavali.gr/ZJfMPCJG.exe

Signatures

Files

  • cd732bad42f322cf31ffceb0dcf4fcebbf205ec532a30fb3de4ea61985ed2ff4
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections