General
-
Target
390a29e5fcd9c99947af68232a708014d7e0e07bc2fdaddbe66df4f8b8f3f944
-
Size
2.2MB
-
Sample
240707-zq2f5szhjh
-
MD5
c8276ba383f334132b833a59a0bbd7af
-
SHA1
ee3f8389821358a5318b4e277acdda6f3d819f95
-
SHA256
390a29e5fcd9c99947af68232a708014d7e0e07bc2fdaddbe66df4f8b8f3f944
-
SHA512
8e77d25fe305c524d75733ce4d3b1f9b9b100fb58618c10b07273bfc5bb9dc2fed4188d0baf53158c8f671add676aafec89b9c6f7a3bae2c300b3b629281da8e
-
SSDEEP
24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZG:0UzeyQMS4DqodCnoe+iitjWwwS
Behavioral task
behavioral1
Sample
390a29e5fcd9c99947af68232a708014d7e0e07bc2fdaddbe66df4f8b8f3f944.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
390a29e5fcd9c99947af68232a708014d7e0e07bc2fdaddbe66df4f8b8f3f944.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
pony
http://don.service-master.eu/gate.php
-
payload_url
http://don.service-master.eu/shit.exe
Targets
-
-
Target
390a29e5fcd9c99947af68232a708014d7e0e07bc2fdaddbe66df4f8b8f3f944
-
Size
2.2MB
-
MD5
c8276ba383f334132b833a59a0bbd7af
-
SHA1
ee3f8389821358a5318b4e277acdda6f3d819f95
-
SHA256
390a29e5fcd9c99947af68232a708014d7e0e07bc2fdaddbe66df4f8b8f3f944
-
SHA512
8e77d25fe305c524d75733ce4d3b1f9b9b100fb58618c10b07273bfc5bb9dc2fed4188d0baf53158c8f671add676aafec89b9c6f7a3bae2c300b3b629281da8e
-
SSDEEP
24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZG:0UzeyQMS4DqodCnoe+iitjWwwS
Score7/10-
Drops startup file
-
Suspicious use of SetThreadContext
-