General

  • Target

    easy_Malicious_17eb9e6d20c95ba21c07cd199ef680beacce8a231afdbb7dfeeb67fb8dadb47a.exe

  • Size

    90KB

  • MD5

    58108ea177798bc63ddbec1d480cf79f

  • SHA1

    da2f9d0cd50959db607ce888340f27491abdec30

  • SHA256

    2bebc8a68693a8a4756012b638a8ef51c1725bd93623a62eccce7f989077ec23

  • SHA512

    05a1f657984fb80809ee76c8fc301c9f5bccab2c21702cb73386c617807922b63fee4b3f96aea1333a7ac4fe614aa0d8b4d3dee69bd53727348a8edc810fb28a

  • SSDEEP

    1536:UnSncgyGqTDRXmGcwSCfZDalZNg9tvo0iO3AX4ApTvMEIkkzmt2lg:2SnMuGc/CfZDap6COU45EIotmg

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://www.atescl.com/fredsong/goodluck/gate.php

Attributes
  • payload_url

    http://www.atescl.com/fredsong/goodluck/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • easy_Malicious_17eb9e6d20c95ba21c07cd199ef680beacce8a231afdbb7dfeeb67fb8dadb47a.exe
    .exe windows x86


    Headers

    Sections