General

  • Target

    1047043fe04de07c31094b9d9c7324c49d1c0125701d350361abf1b73ae76d81

  • Size

    42KB

  • MD5

    4164bb779d9bbfaeb67194b70709141e

  • SHA1

    8eb9f59a9877cf43fdc6d8c329d945d9f8a91c98

  • SHA256

    1047043fe04de07c31094b9d9c7324c49d1c0125701d350361abf1b73ae76d81

  • SHA512

    4e42cc563dba65f38e1b85c26ac1ca52e664f7e4f04ebea0741a9e3ab3a45594ed8130a3827be1c7a80c1da9a93ef29a73ae3ea721570d279ad98d14cf79b5c4

  • SSDEEP

    768:j5osb6bMmxGdAlGRD1rjFN1MizxMDJH0sBYTb8O+gY6HRT6HpD+Idjtjodj:OO6MAy9MMMD10sBwe6HRT6JdtE

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://67.215.225.205:8080/forum/viewtopic.php

http://176.58.121.168/forum/viewtopic.php

Attributes
  • payload_url

    http://text-konverter.homepage.t-online.de/BdG.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1047043fe04de07c31094b9d9c7324c49d1c0125701d350361abf1b73ae76d81
    .zip

    Password: infected

  • e7accca027c91988d22b762354a2e7beac3c766a4ed44eb6c543ab7fe5367414.exe
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections