General
-
Target
2004-63-0x0000000000400000-0x000000000041C000-memory.dmp
-
Size
112KB
-
MD5
f1bd477938ecae79bc39a0694cba9857
-
SHA1
a9c2e86876acf4b461cee8e23b4fd8bd261431c9
-
SHA256
55a722b47ae6d56fd3683b57bd1e248d1ed7e238a58dad3fbcb81e6a1bb7e9d5
-
SHA512
e0d3c55e85455987903837cb881ce527d50172d02808b5eb65728446000a5de6694dac5398fb55a0dc0ecbe90b0712c02541a95e980207e9747d7270b2b0fc6d
-
SSDEEP
1536:j1Jzqn3ymqT+I4/Cru+9V3lAb3NBsUNHaQKeOvLpWTvTEaOkzmaMYIUiZ:jbzOyMhQ3Wb3XOTaEauaMYIUiZ
Score
10/10
Malware Config
Extracted
Family
pony
C2
http://sbcnt.com/web/web/gate.php
Signatures
-
Pony family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2004-63-0x0000000000400000-0x000000000041C000-memory.dmp
Headers
Sections