General

  • Target

    3fa2a14ecf5b341310532e04423c9bf8cf806bcdb3feecd9f37f3b8257ccf27b.exe

  • Size

    2.6MB

  • Sample

    241218-kyfr3sslex

  • MD5

    f0097b227864c351f73bf62041d3f7b7

  • SHA1

    10fc7e924a039f258931621c4387772bc53854b8

  • SHA256

    3fa2a14ecf5b341310532e04423c9bf8cf806bcdb3feecd9f37f3b8257ccf27b

  • SHA512

    a7fd0878afd89b3edfdeb6ea310d7fc2206dfb9ba7ac5329947bc24a33945273fde9d9d5a4be4ac1f9867eb01d61ce43fcc55017a70eb2d793bda87f449ca6ea

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlZ:86SIROiFJiwp0xlrlZ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Targets

    • Target

      3fa2a14ecf5b341310532e04423c9bf8cf806bcdb3feecd9f37f3b8257ccf27b.exe

    • Size

      2.6MB

    • MD5

      f0097b227864c351f73bf62041d3f7b7

    • SHA1

      10fc7e924a039f258931621c4387772bc53854b8

    • SHA256

      3fa2a14ecf5b341310532e04423c9bf8cf806bcdb3feecd9f37f3b8257ccf27b

    • SHA512

      a7fd0878afd89b3edfdeb6ea310d7fc2206dfb9ba7ac5329947bc24a33945273fde9d9d5a4be4ac1f9867eb01d61ce43fcc55017a70eb2d793bda87f449ca6ea

    • SSDEEP

      49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlZ:86SIROiFJiwp0xlrlZ

    Score
    7/10
    • Drops startup file

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks