Overview

overview

10

Static

static

10

1948-56-0x...ry.exe

windows7-x64

1

1948-56-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1948-56-0x0000000000400000-0x0000000000419000-memory.dmp

  • Size

    100KB

  • MD5

    be75489522c9c220d55fbd61ebde1fff

  • SHA1

    ed438f048f74d8d4fe31f9285004c0d86112e5d7

  • SHA256

    6f27c824847b58525e31ab3cbf3ea5fb3ad305615d8a57f1a16ff683917a46d9

  • SHA512

    026e489c19f7db7a8edc4d89755807aa4e1d9100cc28cc915d05f8a9c2947eb74aaf57fd6dd8b0d4737a276cfc63144371db7d0d1595352523dff3ac4c2d907f

  • SSDEEP

    1536:UnSn0nSncgyGqTDRXmGcwSCfZDalZNg9tvo0iO3AX4ApTvMEI/kzmt9:2SnWSnMuGc/CfZDap6COU45EI/t9

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://fourwaysgroup.com/klin66/panel/gate.php

Attributes
  • payload_url

    http://fourwaysgroup.com/klin66/panel/k6.exe

Signatures

Files

  • 1948-56-0x0000000000400000-0x0000000000419000-memory.dmp
    .exe windows x86


    Headers

    Sections