General

  • Target

    1e691c7d27208c64bff15aca6f7b65fc3252a1dd8d87e08def8c3363c97f27dd.exe

  • Size

    2.6MB

  • MD5

    2d926d85d20f2aa688fb7fa54ee07c4e

  • SHA1

    b02e05455154ca76e7dfa04b84bd004d715e9103

  • SHA256

    1e691c7d27208c64bff15aca6f7b65fc3252a1dd8d87e08def8c3363c97f27dd

  • SHA512

    e2708a5ec7f6c266099aad7aade09a5566befaa3ca18a1cd4a44fddfd6e2293638c46b5f8df7b957a0428169b05dbf6567b3c56ca0d07c38b849ca1edc350314

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlM:86SIROiFJiwp0xlrlM

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e691c7d27208c64bff15aca6f7b65fc3252a1dd8d87e08def8c3363c97f27dd.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections