Overview

overview

10

Static

static

10

56b438b706...58.exe

windows7-x64

10

56b438b706...58.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56b438b7067c7488b47a7a9835716258.virus

  • Size

    90KB

  • MD5

    56b438b7067c7488b47a7a9835716258

  • SHA1

    1d8eb9aa5b7508b1dbd41e48464977cd22cd7ce3

  • SHA256

    da5e118efc4fa6717f2060eac58d5ba23690fc06a3ecb2a661191dcab7e87d8c

  • SHA512

    064c1050bc3540884656fb051482016ab56268ea61ba50837e0417999cfbea0cf873114f0c05ec8b4457a1f5b36c87cbaded9d6c987f79a60ff2a089e080ebed

  • SSDEEP

    1536:UnSncgyGqTDRXmGcwSCfZDalZNg9tvo0iO3AX4ApTvMEIBkzmt2l:2SnMuGc/CfZDap6COU45EIdtm

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://192.168.12.153/panel/gate.php

Attributes
  • payload_url

    http://192.168.12.153/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56b438b7067c7488b47a7a9835716258.virus
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections