General

  • Target

    f7b14451e138592d6e9e71cdeb23a5db4f65bcb8847cf1d756f0f62ea5dd9465

  • Size

    91KB

  • MD5

    1e9c7f2237045a5aa935f1236f578780

  • SHA1

    ed6ce45582f2414401ada35b1e0fcc15956fda97

  • SHA256

    f7b14451e138592d6e9e71cdeb23a5db4f65bcb8847cf1d756f0f62ea5dd9465

  • SHA512

    fda9ce49291feb138bec15e0fec191a5afe6680484c8bf097f6c94ef35ab80a04efc8676595790630ecb2a5acb2d12d12861bbde775070f0050b67cf13105a37

  • SSDEEP

    1536:0vPWKTlx124qTA3yG+gZIcN40olLXBdwPOGEc1Tv0kzbR/L:8+K5xb+gGcS0bPOGEWR/L

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://www.arki.com:8080/forum/viewtopic.php

http://arki.com:8080/forum/viewtopic.php

http://50.57.185.72:8080/forum/viewtopic.php

http://docreature.com/forum/viewtopic.php

Attributes
  • payload_url

    http://208.2.139.48/a7U9sC.exe

    http://buildingblockadsmarketing.com/kiz.exe

    http://drucker.v.pl/Vm3MnUk.exe

Signatures

Files

  • f7b14451e138592d6e9e71cdeb23a5db4f65bcb8847cf1d756f0f62ea5dd9465
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections