Overview

overview

10

Static

static

10

f66b72fe67...b9.exe

windows7-x64

7

f66b72fe67...b9.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f66b72fe6793017a8e755f1a7713e758e004a1af40248c3c5c3eb8b4fdc15bb9

  • Size

    2.2MB

  • MD5

    545e7314a4885f17c1a9319f535fafb3

  • SHA1

    05f1356f1475b59050694a74dcbcf0883c673525

  • SHA256

    f66b72fe6793017a8e755f1a7713e758e004a1af40248c3c5c3eb8b4fdc15bb9

  • SHA512

    e0368934ab996e92e2adc9a0a7fc293a582ff8eda78134cb3f3d23fcd784dd8da5c391889e7023132364231d1f34b947ecb7c3e760ea543ad76445ec95b0e137

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZA:0UzeyQMS4DqodCnoe+iitjWwws

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f66b72fe6793017a8e755f1a7713e758e004a1af40248c3c5c3eb8b4fdc15bb9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections