General
-
Target
2588-11-0x0000000000400000-0x000000000041C000-memory.dmp
-
Size
112KB
-
MD5
3bcd46149b4da45178c49660f6e7ad97
-
SHA1
2f929aa8496da981ffb762b24b7dc9af442103ff
-
SHA256
99f44d231b28c68d4f4dbd1fca9b7775cdaaeef19b120c7deb8d90f761ef078d
-
SHA512
b7accff8bf08c7a9dee207e0c9db00dc1bcc124f1198bf879574477649fde5c4c9c7275399bfc281b53ac5542cfed631864367ebc51e2d46263bb077618897f8
-
SSDEEP
1536:Ydng3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEI8LkzZokvXG:HdOy+ubiDBzv+1H4OgYEIzokv2
Malware Config
Extracted
pony
http://criminallawdc.com/default.php?517MTyKXbA4pZuueQ1ay6Dgl2uEjau8yNh
http://1callalert.com/default.php?qA6UBcu6AjB8x9JqvOtC3aBFoTU5C21aEDB34
http://semtly.com/default.php?8xRRepn5vWSVMvIgKDkgQwCMvQZR6bUhD9vdP1U9P
http://choiceonesupport.org/default.php?iqsvP4dhnVk82neqFum1nvJU43HB8D6
http://e3pos.com/default.php?SltKWD44EdkECNMISztnGyO3arr5mRG6rjiVzFkw1V
Signatures
-
Pony family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2588-11-0x0000000000400000-0x000000000041C000-memory.dmp
Headers
Sections