General
-
Target
59ee39ecc079f508931f556b7174f1dc4c035c00b07741bd0f8a5438140ae176.exe
-
Size
2.6MB
-
Sample
250112-3hda5axlbq
-
MD5
ce12bb0b0ce86d8704e14c213e092eda
-
SHA1
54772aae529445c36dc98f4ec23e2f149c82cfa2
-
SHA256
59ee39ecc079f508931f556b7174f1dc4c035c00b07741bd0f8a5438140ae176
-
SHA512
1acb791d5b64fd22375c4d164f0da93928123a0692e48af8cb69d713dc8f55528ddc8b9f1f63a6b64d30f5171f6517b46aabce86830aff6fdee7a9e006a27431
-
SSDEEP
49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlQ:86SIROiFJiwp0xlrlQ
Behavioral task
behavioral1
Sample
59ee39ecc079f508931f556b7174f1dc4c035c00b07741bd0f8a5438140ae176.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
59ee39ecc079f508931f556b7174f1dc4c035c00b07741bd0f8a5438140ae176.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
pony
http://don.service-master.eu/gate.php
-
payload_url
http://don.service-master.eu/shit.exe
Targets
-
-
Target
59ee39ecc079f508931f556b7174f1dc4c035c00b07741bd0f8a5438140ae176.exe
-
Size
2.6MB
-
MD5
ce12bb0b0ce86d8704e14c213e092eda
-
SHA1
54772aae529445c36dc98f4ec23e2f149c82cfa2
-
SHA256
59ee39ecc079f508931f556b7174f1dc4c035c00b07741bd0f8a5438140ae176
-
SHA512
1acb791d5b64fd22375c4d164f0da93928123a0692e48af8cb69d713dc8f55528ddc8b9f1f63a6b64d30f5171f6517b46aabce86830aff6fdee7a9e006a27431
-
SSDEEP
49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlQ:86SIROiFJiwp0xlrlQ
Score7/10-
Drops startup file
-
Suspicious use of SetThreadContext
-