Overview

overview

10

Static

static

10

aa48fa678a...65.exe

windows7-x64

10

aa48fa678a...65.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa48fa678a65a000fd139edb33f46565.exe

  • Size

    103KB

  • MD5

    aa48fa678a65a000fd139edb33f46565

  • SHA1

    77463eebb9fefc63af183480d87b4742ac1d28fe

  • SHA256

    3497ec8d3717bf385a651855082d4a93805296abc5189a0a81bf51cd80d46d1e

  • SHA512

    ad7d4f0c0a13f11af35a5f80d7af220084276bf2285ffa398659fd8fbbfe51ecbbff54e14b6a88da8af8ab3769de9e68b2fed5d8b5bef224d630faa872c8bcaf

  • SSDEEP

    1536:vt8UEN3YqiqTLEcW+L9gs2rS+TTYz52kqnjQXyAOrc6neTvDkzbklql/2fqh:Ch1H1W9+eNkdOrDnH0ql/2fqh

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://top.thisispw.com/keys7369921/gate.php

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa48fa678a65a000fd139edb33f46565.exe
    .exe windows x86

    085f942c74d09a78dcd2b95a4c1c7441


    Headers

    Imports

    Sections