Overview

overview

10

Static

static

10

Report.exe

windows7-x64

10

Report.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Report.exe

  • Size

    34KB

  • MD5

    3e7da07027a273d289ec506abbe1dce4

  • SHA1

    221e5938e67584c4960859ca42382a5881994a46

  • SHA256

    6739aa28e378b65585a1e2d1c6c414335d93957b89761fb2520e9fbe2b6d7666

  • SHA512

    b64811a7a464d4ff79b1d924ab9f9be8803aeb48ae3ce86623ed638ec47551f91a32eff7b2ab5256e31b4fc5dc379b5950678e9dcb69d531c97785e4aab3ae47

  • SSDEEP

    768:vZDMNVN0xYiKO1K4nVr1WG0HxMLHYdQyYtX551f962FpJ6yXH:vZaUxqP2ptP8Q/551IQJ1XH

Score
10/10
upxpony

Malware Config

Extracted

Family

pony

C2

http://dapurslkm.co.id/mw/p/gate.php

Attributes
  • payload_url

    http://dapurslkm.co.id/mw/p/micro.exe

Signatures

  • Pony family
    pony
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Report.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections