Overview

overview

10

Static

static

10

02864b5d1f...18.exe

windows7-x64

10

02864b5d1f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    02864b5d1f9e3970d8420fc413d4244d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    02864b5d1f9e3970d8420fc413d4244d

  • SHA1

    4f27a54e8fbbb500dc9fdbe0a5a987e30dbaf506

  • SHA256

    541342b95b536efbabe64e2e254bea0dec8c3c122e51f24f0440415ade8d2716

  • SHA512

    33c121e9eab4e6ca561ebe732b1ad6ff6f5ca20bec8f26a1184031a82768a21502193708eb73dca2206dc8d10722426e7f6e36c5c220451049062b6420f4d1f8

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZS:0UzeyQMS4DqodCnoe+iitjWww2

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02864b5d1f9e3970d8420fc413d4244d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections