General

  • Target

    1772-60-0x0000000000400000-0x000000000041C000-memory.dmp

  • Size

    112KB

  • MD5

    473ad73c5e0b45749c9a94b620fc4913

  • SHA1

    a7d96f42a9c98bf11595ca3f188d541c3d339efd

  • SHA256

    4d90da996eac28f86017f723bcad1182c39899d4717c7b1053bb41ca9c45d97a

  • SHA512

    52bc5a745512d1c85f79ad2b89d39287d25807f31a065887eaa349f769eb1ed8019db20e78158ab134093bf31dec6dbc41d2a9eaeedb870084944b5f90415a88

  • SSDEEP

    1536:ENx17N/yqTcMwmiijjFWoTcXbD6E+rx3begCZyQOnSJTvtkzbkvql//Duqhr:Y7Z/gmi5oTcX/c10OnrWql//Duqh

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://hotelexcelsior.com.np/cli/panelnew/gate.php

Signatures

Files

  • 1772-60-0x0000000000400000-0x000000000041C000-memory.dmp
    .exe windows x86


    Headers

    Sections