General

  • Target

    4a136de73fdaa9931c3bfa20fafe8df8e41cfa3e895aeba81f65d7ce4a2774f4N

  • Size

    2.2MB

  • MD5

    d42692418a55c245cd331c39ea620ac0

  • SHA1

    3d761b11209d2e167f06909f410e01609a8beb4f

  • SHA256

    4a136de73fdaa9931c3bfa20fafe8df8e41cfa3e895aeba81f65d7ce4a2774f4

  • SHA512

    6cbb3a9d287f11e13d4a3947903b0d2478182b957e199a9085805853916bb9ac3594c655b12ab487e90b50a9eef1a1068632bbb8eded87ff0e6fac8ae933b7f3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZn:0UzeyQMS4DqodCnoe+iitjWwwD

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a136de73fdaa9931c3bfa20fafe8df8e41cfa3e895aeba81f65d7ce4a2774f4N
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections