Overview

overview

10

Static

static

10

fareit_66e...e_.exe

windows7-x64

10

fareit_66e...e_.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fareit_66e900538312843862ddf2686ccdd8b8926957d29139a2eaf66f2cef4a33a521_payload1.exe_.exe

  • Size

    479KB

  • MD5

    3f95cd9aaa3e666072aa031bb8e444ab

  • SHA1

    a892e4b7ede93e63cdfc34bfd573843910ac505f

  • SHA256

    e9772b945a731b447725680b8ef8b8252c2bb19931005718a8711ae527d532ba

  • SHA512

    9943d6bd3b97949d906d884a4a36ec812ee3d712c617fa9420445fa90a76703c0d34fdbe1d280fd95551e95342e044cc88eb563241953b140ddd08f4409dfcf7

  • SSDEEP

    1536:TI9NpX5ThqTF4QwPTvUZUzU/r6Jshf1w9oKVBZUOPauTvWkzbkRr/bYRXDr2U:0fB5TfrYUzUj6JsvsyOycor/oX32U

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://keytrxlink.xyz/pny/apos/cache.php

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fareit_66e900538312843862ddf2686ccdd8b8926957d29139a2eaf66f2cef4a33a521_payload1.exe_.exe
    .exe windows x86

    1f3b7eab7f8ef80c1901611824a3f65d


    Headers

    Imports

    Sections