Overview

overview

10

Static

static

10

95d4eca450...26.exe

windows7-x64

10

95d4eca450...26.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95d4eca45056b0abfd6f8bb5cd05d5c30d25c1e7be9e2a3104b6a399939ef226.exe

  • Size

    88KB

  • MD5

    d579a8bba252bf0a5bd698a7e0a95130

  • SHA1

    b1510a4940a7710e27c6b81963a66965d1994627

  • SHA256

    95d4eca45056b0abfd6f8bb5cd05d5c30d25c1e7be9e2a3104b6a399939ef226

  • SHA512

    8e7fb2b551f3d7b3576b390513c2b5a7bca7fc3ce1b042f33e23b155e0d47d478029d0ee583b8905cfd873e81a7ab219ffff909c9284746ec33521554b1e3799

  • SSDEEP

    1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEIGkzZ3:9dOy+ubiDBzv+1H4OgYEIJ3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://www4.mafia2.co.nu/default.php?2frheGrNK89IUvOLmxrKavncv8rkxM6s3k

http://soarcard02.com/default.php?PO2SRhs6h5ya1FDDLvpYw4Ywpnx8StSKVjIpC

http://idca2011.com/default.php?BPAu5yL4mGGkdnvdfv8NVYKJBVG69PFrlwiwONm

http://tanincamera.com/default.php?qP5wxR89Y8jcsSCQBumO9GOIfn3UGKaVwxPx

http://at206.jlink.co.uk/default.php?Nn9QWfhPcrpvFU8jRN8UNXo1IaVlrzHQVN

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 95d4eca45056b0abfd6f8bb5cd05d5c30d25c1e7be9e2a3104b6a399939ef226.exe
    .exe windows:4 windows x86 arch:x86

    728afd0aeb7539a2a721ececf5f36865


    Headers

    Imports

    Sections