Overview

overview

10

Static

static

10

NEAS.5848d...90.exe

windows7-x64

1

NEAS.5848d...90.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.5848d1f3d819bc8dfdbc150a90cb7990.exe

  • Size

    100KB

  • MD5

    5848d1f3d819bc8dfdbc150a90cb7990

  • SHA1

    8502c5192ca1380507ca7383c6d8dfd987c2c9c9

  • SHA256

    e225f386039f62096025109a901354721966355fea6ab5877169dfe9c1dfeceb

  • SHA512

    7217657f850b171db66c0306b17d5892a5c5a38ffc68e9054373c835074c4792b9c3d256153e437dee04708669dd377e3343014e957c2001a5c1a6393e618882

  • SSDEEP

    1536:oC/w10qT4dCeYEUrOZ1gyRcTAZxtqYxyylOQGQh5TvfEKMkzmbF4:FoNDWZ1gecspqEOCzEKAbF4

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://feyofixa.com/macmac/gate.php

Attributes
  • payload_url

    http://feyofixa.com/macmac/nicro.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.5848d1f3d819bc8dfdbc150a90cb7990.exe
    .exe windows:4 windows x86


    Headers

    Sections