General

  • Target

    b11f7ce2b0e02e11e23154c301ac7bd72b370670f899b9ba6d271fb4b8432476

  • Size

    91KB

  • MD5

    308607fe7289a68b646131f87f26fcb0

  • SHA1

    4e5874f1afe8a91fde1337b5e5dc4b10c5834ae7

  • SHA256

    b11f7ce2b0e02e11e23154c301ac7bd72b370670f899b9ba6d271fb4b8432476

  • SHA512

    7084967656f6b84317e718475adcdf9f84e26e3bd835bf0c5f58e161cff11925f55eb48669d632e60ae8a7004cb6b2387e9b3d7b7c6170ff071a9d98d3560e51

  • SSDEEP

    1536:QlS6eIACR4qTcSw3cfklbWA3TgqikcX5/lUqknKO1cNFTv6kzbh/ySb:Cl3AoklbU/QKO1Gxh/P

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://prospexleads.com:8080/forum/viewtopic.php

http://phonebillssuck.com:8080/forum/viewtopic.php

http://myimpactblog.com:8080/forum/viewtopic.php

http://yourprospexblog.com:8080/forum/viewtopic.php

Attributes
  • payload_url

    http://dev.cultureslant.com/QPvxH.exe

    http://asromamontrealfanclub.com/JXRguMwo.exe

    http://visualsystem.de/pvG.exe

Signatures

Files

  • b11f7ce2b0e02e11e23154c301ac7bd72b370670f899b9ba6d271fb4b8432476
    .exe windows x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections