Overview

overview

10

Static

static

10

78a2e77273...08.exe

windows7-x64

10

78a2e77273...08.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    78a2e772734725820a72cbd3c95d5c878ffe3e4eb49d8e21d0bf3008c251e908.exe

  • Size

    91KB

  • MD5

    92b57c4d03576eab480a7cf97c1563c2

  • SHA1

    948b6cb7a0a2403d1e7e7d79bf23bcd991c0eb79

  • SHA256

    78a2e772734725820a72cbd3c95d5c878ffe3e4eb49d8e21d0bf3008c251e908

  • SHA512

    c1aacf53fe2837e10409a9c9a3bedf8a79ada1c72b87df5d42ebb2be40ca67a8282bd257d4ed88443e7babf09280833dce8156b3e0cc8cd699e0773e23e717b4

  • SSDEEP

    1536:dVYGu65074qTzqArkPQ9tUKGyW7f92EmZDO5caTvOCkzb2/9I:Pfd5e9yK/yfYDO5Q2/9I

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://london-leather.com/forum/viewtopic.php

http://londonleatheronline.com/forum/viewtopic.php

http://londonleatherusa.com/forum/viewtopic.php

http://luggage-tv.com/forum/viewtopic.php
Attributes
  • payload_url

    http://mobilidea.com.mx/4ME7W3.exe

    http://landhausbakery.com/nNF.exe

    http://www.rethemniotikokarnavali.gr/ZJfMPCJG.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 78a2e772734725820a72cbd3c95d5c878ffe3e4eb49d8e21d0bf3008c251e908.exe
    .exe windows:4 windows x86 arch:x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections