General

  • Target

    90734a12f06354bf169f99db8373aedd76ef8e570e5793c56c4417b8f7d6b143N.exe

  • Size

    2.6MB

  • MD5

    30302e02ca072eb53f9a17b721a9c210

  • SHA1

    e0ece9a40add7c9a37cb10d82ae1d35df2b7b962

  • SHA256

    90734a12f06354bf169f99db8373aedd76ef8e570e5793c56c4417b8f7d6b143

  • SHA512

    adf17075a28bab3623984038850690930a08bdff5e9bb61f1bf70a51b97c499561e8e9fc54dbcf811f9d04b6656f906598a8c245af41621a105d0a5c31eb08d1

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrly:86SIROiFJiwp0xlrly

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 90734a12f06354bf169f99db8373aedd76ef8e570e5793c56c4417b8f7d6b143N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections