[ikolor]

next..

https://www.virustotal.com/en/file/82ee ... 485977418/

[Antelox]

next..

https://www.virustotal.com/en/file/82ee ... 485977418/

It's Pony.

Gate

http://xaviersintschool.in/duke/gate.php

Panel

http://xaviersintschool.in/duke/admin.php

BR,

Antelox

[maddog4012]

ikolor wrote:
next..

https://www.virustotal.com/en/file/82ee ... 485977418/

Dropped files from ka7pon.exe

[ikolor]

thanks

https://www.virustotal.com/en/file/7935 ... 530630412/

[Antelox]

thanks

https://www.virustotal.com/en/file/7935 ... 530630412/

It's PonyLoader.
C2:

hxxp://tp-india.com/hhh/eng/gate.php

BR,

Antelox