General

  • Target

    9b2ede6c7180ed4c6883c37d847adddf

  • Size

    129KB

  • MD5

    9b2ede6c7180ed4c6883c37d847adddf

  • SHA1

    6bbc6915963d6e98951e5c459a6b94012d3a3b2a

  • SHA256

    23d823104ae809f331496a10a777270e96dde7cda66223a147fb8947a59aac09

  • SHA512

    bbdf7d06d46d05f996830550e27a15791f2462eac7b229e04b8b885085b4b7ec8e5a8aacdabec9c0fc9f6107d8f9b254fff0e6e0ecc633bc7bc23de2d0584d57

  • SSDEEP

    1536:LV2EDwlOqTHuEOoZiun5QVbtaoXuZ6kwPZoeCOxw8JTvkE4OkzZBeLajg:x2Hrkun5ytpXY6kwwOxkE4hBBjg

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://50.116.34.38/forum/viewtopic.php

http://198.143.159.92/forum/viewtopic.php

Attributes
  • payload_url

    http://sprinksys.com/kWWCPfd.exe

    http://planenrs.com.br/yYXQ.exe

    http://www.fahrsicherheit-cardrive.de/ZGg.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b2ede6c7180ed4c6883c37d847adddf
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections