37.9.53.121 (Pony Stealer hosted by pinspb.ru)

Server:  37.9.53.121
Gate file:  //xSZ64Wiax/WiOzJe3G7u7ok3gOYqHdv2xk.php

According to virustotal this is an affiliate program, with the pony file downloaded from the same site.

Hosting infos: http://whois.domaintools.com/37.9.53.121

Related md5s (Search on malwr.com to download the sample)
Pony:
37ae22ba2799ed146c47085268dd481b

Categories: Uncategorized