General

  • Target

    C22FE6F33537F15C5394CEEEFC6947F9.exe

  • Size

    89KB

  • MD5

    c22fe6f33537f15c5394ceeefc6947f9

  • SHA1

    b11fa358488367de126e42ef1182f3916aa2a4c8

  • SHA256

    e7accca027c91988d22b762354a2e7beac3c766a4ed44eb6c543ab7fe5367414

  • SHA512

    80b52dbfd2e1de3cf0d0b4d4be4b4cae90cf253ec6f0d2778a333987df1496792d4ace87ae50bc0be65b5c9c627173a023c16e791abbd7e602b19e064004b85d

  • SSDEEP

    1536:fuF+EkXXqTNdBj3pSz2TXn1uLNuDzkOocmnDTvVEwhMkzZ1tLE:2FwS3pSaTlgOoXVEwBzLE

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://67.215.225.205:8080/forum/viewtopic.php

http://176.58.121.168/forum/viewtopic.php

Attributes
  • payload_url

    http://text-konverter.homepage.t-online.de/BdG.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • C22FE6F33537F15C5394CEEEFC6947F9.exe
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections