Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1940-66-0x00000000004114CF-mapping.dmp

  • Size

    259KB

  • MD5

    3fafab3eba1caa91452dee60cb125df8

  • SHA1

    f1bc5b11f94c5ca3c70771a807f1fdb82f0f100e

  • SHA256

    d0e7e41d5d0ee5c26d1d39930082cdd84d327f7ee015b6eca79b6a40583576aa

  • SHA512

    a2a1d954920ae26093fa3a72eef05d7a987bf5e077e659715c37626417f56c05a7a35588dba8836a669cc78b37d968f51aeeabf6e976b78a6044b26cd537867e

  • SSDEEP

    6144:k57lblHO9t0i/HJJ857lblHO9twi/5UJ1:sblHO9nnUblHO9TO1

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://vivaliaremedies.com/wp-includes/pomo/maxx/panelnew/gate.php

Attributes
  • payload_url

    http://vivaliaremedies.com/wp-includes/pomo/maxx/panelnew/pony.exe

Signatures

Files

  • 1940-66-0x00000000004114CF-mapping.dmp