General
- Target 884-65-0x0000000000400000-0x0000000000420000-memory.dmp
- Size 128KB
- Sample230127-t5bldacb45
- SHA256 75468460cced4f56fd5a87218949ef08e0fdce71e90555d382b03cf0519884bb
- MD5 b755a9bdaa44174be343b00d4b2f7aa2
- SHA1 03c8e7be6a407cc00c5d4d5676e6a20e19690400
- SHA512 601022e6466685880e4b358dedf83701b2cf0b5437b668088158143034ea861c76a7c60f3e011f3cb96510ae994d16810c6dae07f4bfda54b24635c89430c064
- SSDEEP 1536:BZKUQiwGZqT7MbKYRXi49v4cUkRjhPClQOYxNTvukz4+7Z/iiHkDMnouy8B:Bc9rG1N5P5DOKm8Z/iiHVout
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
884-65-0x0000000000400000-0x0000000000420000-memory.exe
Resource
win7-20221111-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
884-65-0x0000000000400000-0x0000000000420000-memory.exe
Resource
win10v2004-20221111-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
pony
C2
-
http://82.146.37.129/ppp/ta.php
Attributes
-
payload_url
http://82.146.39.221/p2p/1.exe
Targets
-
- Target 884-65-0x0000000000400000-0x0000000000420000-memory.dmp
- Size 128KB
- SHA256 75468460cced4f56fd5a87218949ef08e0fdce71e90555d382b03cf0519884bb
- MD5 b755a9bdaa44174be343b00d4b2f7aa2
- SHA1 03c8e7be6a407cc00c5d4d5676e6a20e19690400
- SHA512 601022e6466685880e4b358dedf83701b2cf0b5437b668088158143034ea861c76a7c60f3e011f3cb96510ae994d16810c6dae07f4bfda54b24635c89430c064
- SSDEEP 1536:BZKUQiwGZqT7MbKYRXi49v4cUkRjhPClQOYxNTvukz4+7Z/iiHkDMnouy8B:Bc9rG1N5P5DOKm8Z/iiHVout
- MD5 SHA1 SHA512 SSDEEP
Score8/10