General

  • Target

    cfab9c98b929f36c3654de72b8e019ebec422bf3bf08ba9713b37bed1c592931N.exe

  • Size

    2.2MB

  • MD5

    ab520768221a49b47d5f350d2f05e320

  • SHA1

    f7809706e82860a26ceed1f2c10c1628e91df7e1

  • SHA256

    cfab9c98b929f36c3654de72b8e019ebec422bf3bf08ba9713b37bed1c592931

  • SHA512

    5561d8fc96ad335b4eb5529c9379a26250bf7d1a0bf77496f0641015375fd305b08f7502d64d471ea1d3b0049ef9ae56c60b8755dea6882f204281334eb0dd1c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZv:0UzeyQMS4DqodCnoe+iitjWwwz

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cfab9c98b929f36c3654de72b8e019ebec422bf3bf08ba9713b37bed1c592931N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections