General

  • Target

    18edd607d0ba7c289c4023e9250941c6c0df6168c97865da83ed9329a38e8bc0N.exe

  • Size

    2.6MB

  • MD5

    5f637e755e1701eca25ad8d9ea088640

  • SHA1

    76713c766cd3865f6a2c0d26d1e5adbcda8dbad2

  • SHA256

    18edd607d0ba7c289c4023e9250941c6c0df6168c97865da83ed9329a38e8bc0

  • SHA512

    b1288f505e5264029528c244ad606284a432bfae49ed542774d9223eb128b72ae4c4fe2904d53658ed96a045c2700ece4e4bb3fccd10e982327d881720721aab

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlN:86SIROiFJiwp0xlrlN

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18edd607d0ba7c289c4023e9250941c6c0df6168c97865da83ed9329a38e8bc0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections