General

  • Target

    3fa2a14ecf5b341310532e04423c9bf8cf806bcdb3feecd9f37f3b8257ccf27b.exe

  • Size

    2.6MB

  • MD5

    f0097b227864c351f73bf62041d3f7b7

  • SHA1

    10fc7e924a039f258931621c4387772bc53854b8

  • SHA256

    3fa2a14ecf5b341310532e04423c9bf8cf806bcdb3feecd9f37f3b8257ccf27b

  • SHA512

    a7fd0878afd89b3edfdeb6ea310d7fc2206dfb9ba7ac5329947bc24a33945273fde9d9d5a4be4ac1f9867eb01d61ce43fcc55017a70eb2d793bda87f449ca6ea

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlZ:86SIROiFJiwp0xlrlZ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3fa2a14ecf5b341310532e04423c9bf8cf806bcdb3feecd9f37f3b8257ccf27b.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections