General

  • Target
    F51D69C196B61F96B9C0B857B318D47D.exe
  • Size 104KB
  • Sample240304-ryjmasdf76
  • SHA256 6a46894366dca550d9e1595d8b87db420d8a96c7b542b35103f8453289d448da
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • pony

C2
  • http://myetherwallet.kl.com.ua/1/web/gate.php

  • http://myetherwallet.kl.com.ua/1/web/path/gate.php

Attributes
  • payload_url

    http://disk.karelia.pro/0W5vZoi/svchost16.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • F51D69C196B61F96B9C0B857B318D47D.exe
    .exe 104KB

F51D69C196B61F96B9C0B857B318D47D.exe

  • SHA256 6a46894366dca550d9e1595d8b87db420d8a96c7b542b35103f8453289d448da
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
73466
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths