General

  • Target

    4C4183C8EBC475E86F0E75C7D99672EA.exe

  • Size

    90KB

  • MD5

    4c4183c8ebc475e86f0e75c7d99672ea

  • SHA1

    3dd803510d69a2ac5fdc286ef4ff093eee92f08b

  • SHA256

    78d55cdf8b678679a373f1defc1062b4a9e3a23eb5fdcf0230ee032334f5ba0f

  • SHA512

    7b1ad92b67b43bf18faa3613b1385770f9898d27f8aca9cf7368a9d25bb47fd6ce112fb97a6ee1fe65e79435baf9b8a6ab419455fc72ed5ea02126a6f9e29ecd

  • SSDEEP

    1536:w68nFlZqTYyXNfnoS2t7zRKf/Sc2VTOLUUrvnYicbNOd0xTvaEiykzZXR:wRbWASKRKf/S8wUKNO3Eidh

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://72.243.190.162:8080/forum/viewtopic.php

http://198.74.55.173/forum/viewtopic.php

Attributes
  • payload_url

    http://ariane.fiducie.fr/aZUQvgm0.exe

    http://home.meischner.net/BANGf.exe

    http://mihneabelcin.com/Upq.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4C4183C8EBC475E86F0E75C7D99672EA.exe
    .exe windows:4 windows x86 arch:x86

    8ccde584db2b33df6901142bba965604


    Headers

    Imports

    Sections