Overview

overview

10

Static

static

10

003d9d66be...18.exe

windows7-x64

10

003d9d66be...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    003d9d66be09db079b38d47f3eacd8cd_JaffaCakes118

  • Size

    2.6MB

  • MD5

    003d9d66be09db079b38d47f3eacd8cd

  • SHA1

    adfa36e219de86f0e1bbe0bdd2bda7ef25888e78

  • SHA256

    594388de17de8a9cde8d81d20898d571462d1bade9478699cac3ca3e477c5638

  • SHA512

    2621041bb71c4337e4d5b3915b2382fd04a553d04404e5f6c76c28f4c1d99d52d37951dea0a29b960e6a617d25a9ff6ce88dd7773283f4c5d5eb86e1870c39a3

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrls:86SIROiFJiwp0xlrls

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 003d9d66be09db079b38d47f3eacd8cd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections