Overview

overview

10

Static

static

10

5e0ae08827...cs.exe

windows7-x64

10

5e0ae08827...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e0ae08827b7e58f2b20d1a4539a1980_NeikiAnalytics.exe

  • Size

    81KB

  • MD5

    5e0ae08827b7e58f2b20d1a4539a1980

  • SHA1

    17d05e6df5ab994630a8df1a8619d6ab9d9e14dc

  • SHA256

    c3f0c618060e3b22c4450eff427731ee575703a13d4a11c1c3291dbe3f2ab73e

  • SHA512

    ea252ed9238c05e72d10e72c7adbeb62924ac07c07a7601a62957b12e80583ef671f748723f5b0a3ac0b7118fe8f6d18b6bf070c8d817c1cf2fde311d4bd9dbc

  • SSDEEP

    1536:fShnezVqTEeyNZK3QevQVk3PKd/koahTvAEgKkZK8k:fwQdKAe+k3PKvEgpK8k

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://98.158.129.17:8080/pony/gate.php

http://50.116.9.68/pony/gate.php
Attributes
  • payload_url

    http://www.longingtech.com/14jJyU.exe

    http://ghanaleakplus.com/KVvCk7B.exe

    http://arvina.cz/PpBCye.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e0ae08827b7e58f2b20d1a4539a1980_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    24372f561e1e1d10d855a874a39472c3


    Headers

    Imports

    Sections