General

  • Target

    1620e9623d3091d05e1174765cf1d554b6170bf015128d93cb47bd7c990fb2dcN

  • Size

    169KB

  • MD5

    5aee910953aa17495180bdc2f24e4dc0

  • SHA1

    1b1aa3f3db5e19ea91eb767ab5204c06abea6796

  • SHA256

    1620e9623d3091d05e1174765cf1d554b6170bf015128d93cb47bd7c990fb2dc

  • SHA512

    bce0a2b5f2571950e785a3c1cf606d63df63dc21d3144bdb86024cd95428d86635c1f4d9085779e4521260f0c0644d6f9908def5d0b275ed40defd377b1b36c5

  • SSDEEP

    3072:uTLZhs0uDI0rAfOXl+y+uql/GOtsrVrqhTqndtndhndKnd6:uTLFuD6fOXlql/GLJrqqndtndhndKnd6

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://butterchoco.net/admin/bull/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1620e9623d3091d05e1174765cf1d554b6170bf015128d93cb47bd7c990fb2dcN
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections