Overview

overview

10

Static

static

10

d6d362ab7c...0N.exe

windows7-x64

10

d6d362ab7c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6d362ab7c508c5c660037b918b579e0N

  • Size

    2.2MB

  • MD5

    d6d362ab7c508c5c660037b918b579e0

  • SHA1

    214c67e69bbf98d1cae9a15e14aa575fe47ee555

  • SHA256

    372888a3a6a9460ffe242b651ef04a92ad7237657fceb86d709c6a5560980b61

  • SHA512

    f6311a24a9f013df2a34be6ed578bd451e3daacc092f9b5197393f8c2d7b4b97182be715740afedff47a62544bfc62290dd1d1ba1640e3023d6cb7c8e4c99056

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZw:0UzeyQMS4DqodCnoe+iitjWwwM

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6d362ab7c508c5c660037b918b579e0N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections