General

  • Target

    b5579110472b6ffe6a56a9181e651b4f268985c794fc8b9cdb4aa5565a905bd5

  • Size

    91KB

  • MD5

    1b5da13ae4f053a6adeb4bdbf0109c10

  • SHA1

    055326d5de4188aca836120ea7078d9eccac67b8

  • SHA256

    b5579110472b6ffe6a56a9181e651b4f268985c794fc8b9cdb4aa5565a905bd5

  • SHA512

    520f45e972189721a4e47485418233386a2fa94a4b46e007c3b2ae0ea58f0e9c92c404d11d5624b19700aa3ced03157aaadac284a7188a3a1de9e911112b0511

  • SSDEEP

    1536:qvzGOZiZu4qTsEVF5ye0cgwgGEP4L1Bk9OsCcaTvMkzb4/ASb:Oq2iyyeH3WP/9OPd4/x

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://prospexleads.com:8080/forum/viewtopic.php

http://phonebillssuck.com:8080/forum/viewtopic.php

http://myimpactblog.com:8080/forum/viewtopic.php

http://yourprospexblog.com:8080/forum/viewtopic.php

Attributes
  • payload_url

    http://asuitepreprod.itxtest.net/AXLQ1zQ.exe

    http://dlacton.com/fM5.exe

    http://topseoseobestpractices.com/mbTcd.exe

Signatures

Files

  • b5579110472b6ffe6a56a9181e651b4f268985c794fc8b9cdb4aa5565a905bd5
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections