Overview

overview

10

Static

static

10

b205c6b04d...cb.exe

windows7-x64

10

b205c6b04d...cb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b205c6b04d96612c58080ae73a49ad9a7661c9526bf565a176004edfa511ebcb

  • Size

    92KB

  • MD5

    b00f2c27ebfb73679500504b3c84b655

  • SHA1

    495b96793bd632a953541dd8a1d4bd1a1ee97db8

  • SHA256

    b205c6b04d96612c58080ae73a49ad9a7661c9526bf565a176004edfa511ebcb

  • SHA512

    7f04bb519fbb2667c6c4ae503a55b47b2b858032e91cbcd45786c9e3a179cff51045db5576e7b116d361f1d5b2548b8bd73b6b1b95f7beb4d2be41ac4dc343cc

  • SSDEEP

    1536:oSlbu9PqTb9CwNfk2m2G9LLU3Qh5OhRQZhTv8EYukZvIh+:oAaM/k2LG9fU3QhETEY1vIh+

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://78.129.132.239:8080/pony/gate.php

http://subdatapro.com:8008/pony/gate.php
Attributes
  • payload_url

    http://www.evavajinismus.com/SrEvLs.exe

    http://hermanosbrando.es/8xsfW5.exe

    http://textilsuica.com.br/hsvNq.exe

Signatures

Files

  • b205c6b04d96612c58080ae73a49ad9a7661c9526bf565a176004edfa511ebcb
    .exe windows x86

    24372f561e1e1d10d855a874a39472c3


    Headers

    Imports

    Sections