Overview

overview

10

Static

static

10

468-62-0x0...ry.exe

windows7-x64

1

468-62-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    468-62-0x0000000000400000-0x0000000000419000-memory.dmp

  • Size

    100KB

  • MD5

    d2491d4bf957ca60839f2ae6ce65e97a

  • SHA1

    4cb17b51f420f5026ea6beec9a9df91126d79441

  • SHA256

    3d035df335a847457592eee363f630138981201f2c957b6a7e7d7ae73b5472f3

  • SHA512

    a91202701ce58f2b34c82153e90334598daf328edfa61236943d0f16e3ebaae6d229ac20deeb4c0b642ea139915f8fbedf38034651941c349d6a9b0ec60e781e

  • SSDEEP

    1536:YmH4TPtqqTlgS+qShDOoeIxMovs5dmo02qOPL+p2TvLETePxkzm+:Z4pszqS1bdxFbOj+yETePt+

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://91.243.81.23/bambam/gate.php

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 468-62-0x0000000000400000-0x0000000000419000-memory.dmp
    .exe windows x86


    Headers

    Sections