General

  • Target

    c77c1822181519cc900720913e23754a.exe

  • Size

    91KB

  • MD5

    c77c1822181519cc900720913e23754a

  • SHA1

    3df4e1d64be71192a66ee2b187e04199836a253e

  • SHA256

    ec91a450de2cf9479f28791cb898a485ca288f671846d140dd4ab0dcb67bfcb9

  • SHA512

    50ce60bfee12d78e20044bf31ee14c72e50d0e29ebd44f8f0d34b8ac757628615b74e5c980e8cec1f3a10a4eba617ff50ae32133b84826cefd10aa36d748a7e3

  • SSDEEP

    1536:cfnGO9E3+4qT/Eg/EJruRAPllWfHgPbgX5fIloEOecdTvUkzbZ/h:UGiEc/EYAPSWbaEOeOZ/h

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://abemoussa.com/forum/viewtopic.php

http://abemuggs.com/forum/viewtopic.php

http://abes.co/forum/viewtopic.php

http://abes.net/forum/viewtopic.php

Attributes
  • payload_url

    http://www.arrow2000.ca/RiQw07Xs.exe

    http://abstain.org.uk/2NkRox.exe

    http://bebecaracas.com/Rxu4Wzo.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c77c1822181519cc900720913e23754a.exe
    .exe windows:4 windows x86 arch:x86

    d6cd9cecc12ba283fd2bf86a18ca964e


    Headers

    Imports

    Sections