General

  • Target

    key.exe

  • Size

    103KB

  • MD5

    2fbf80a7ba32f036bb97a2d0d909283c

  • SHA1

    ed00a832320f3806ef3ecacfb54356e55b8e713f

  • SHA256

    aaa583789b2a7d918ab2654f48b2f401588f43f8b835ea176ea4276c59bed4ee

  • SHA512

    a74ec6ffc270d3800f673aa83a76d6dc59857a71791470a4e09653bbfc18ec192b8949566ab15adaf923a3f9b54d568f6de93ad36df70357450d3effb09160ef

  • SSDEEP

    1536:vt8UEN3YqiqTLEcW+L9gs2rS+TTYz52kqnjQXyAOrc6neTvRkzbklql/2fqh:Ch1H1W9+eNkdOrDnZ0ql/2fqh

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://top.regdnl.ru/bussin/gate.php

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • key.exe
    .exe windows:4 windows x86 arch:x86

    085f942c74d09a78dcd2b95a4c1c7441


    Headers

    Imports

    Sections