General
- Target 183c55c7f70a2aa49e38981560906d10bad1879d2235d24d63366b1216ff9b1c
- Size 420KB
- Sample260825-mqxfzahj8x
- SHA256 183c55c7f70a2aa49e38981560906d10bad1879d2235d24d63366b1216ff9b1c
- MD5 24d7a035b07bc04c9d44493592f82e9a
- SHA1 47e374ee0de11b19026a8fcfea558865c149ef1c
- SHA512 56091dbe6acadf818cf2f5f72bd4dc21bf4510dfcdbe902087ab4dac96d013d7b9eb55cad2dd693e50384e879d8b443fe0b8c98d6c6cbb82315e0319e0e51266
- SSDEEP 1536:oxa3ufYMFqTwepumJa2WuO9b/uWF3JIbO3M13Tv8EYOkzZ5dfEKOe8wu:matMXmJa/uOdbIO3AwEYh59kd
- TLSH T166942A53B480A0F1D0A21BB17BC21760E3F99EB9BC768D4DFF9C49496DB22C76B12152
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
183c55c7f70a2aa49e38981560906d10bad1879d2235d24d63366b1216ff9b1c.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
pony
C2
-
http://forum-voip.com:8080/ponyb/gate.php
-
http://forum-voip.net:8080/ponyb/gate.php
-
http://paralysiesfaciale.com:8080/ponyb/gate.php
-
http://paralysiesfaciales.com:8080/ponyb/gate.php
Attributes
-
payload_url
http://s396926870.onlinehome.fr/ePn1ES.exe
http://p12780.typo3server.info/yN0J.exe
http://killickstrategic.com/8rPL.exe
Targets
-
- Target 183c55c7f70a2aa49e38981560906d10bad1879d2235d24d63366b1216ff9b1c
- Size 420KB
- SHA256 183c55c7f70a2aa49e38981560906d10bad1879d2235d24d63366b1216ff9b1c
- MD5 24d7a035b07bc04c9d44493592f82e9a
- SHA1 47e374ee0de11b19026a8fcfea558865c149ef1c
- SHA512 56091dbe6acadf818cf2f5f72bd4dc21bf4510dfcdbe902087ab4dac96d013d7b9eb55cad2dd693e50384e879d8b443fe0b8c98d6c6cbb82315e0319e0e51266
- SSDEEP 1536:oxa3ufYMFqTwepumJa2WuO9b/uWF3JIbO3M13Tv8EYOkzZ5dfEKOe8wu:matMXmJa/uOdbIO3AwEYh59kd
- TLSH T166942A53B480A0F1D0A21BB17BC21760E3F99EB9BC768D4DFF9C49496DB22C76B12152
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10