General

  • Target

    4f367f0b242a058439f1437d33c098f21ab456a802a77385e8b6998b80506601.exe

  • Size

    91KB

  • MD5

    0259441e38c2f88edb3f3ad8a112b722

  • SHA1

    a2e3162f8f2c1fea94b7f63cd83b49fdc219969e

  • SHA256

    4f367f0b242a058439f1437d33c098f21ab456a802a77385e8b6998b80506601

  • SHA512

    43fe02d64b42f55a3b06b0bfeaed2ce827bc110a9f8f8cd447228bd5dc1554fce66b795911e3f9a6d03bc095a9e405dadff05523d1d55f60fed08720914c702b

  • SSDEEP

    1536:pLJqW7HNpQ4qTBl7Mf59CfLMvM352lmz2ROCcnTvHkzb//PI:J8stG4CfYvE54ROC5//PI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://TelevisionHunter.com/pizda/gate.php

Attributes
  • payload_url

    http://damp.pro/edZ4au.exe

    http://parrocchiadiuopini.it/ZrktExKQ.exe

    http://lobbyarkansas.com/q5CV.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f367f0b242a058439f1437d33c098f21ab456a802a77385e8b6998b80506601.exe
    .exe windows:4 windows x86 arch:x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections