Overview

overview

10

Static

static

10

031a08dec2...18.exe

windows7-x64

10

031a08dec2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    031a08dec208456b7a66e529da9e6f25_JaffaCakes118

  • Size

    2.6MB

  • MD5

    031a08dec208456b7a66e529da9e6f25

  • SHA1

    cbf2cd473ad172b2b08e6d52fd894a56e5adfd8c

  • SHA256

    25dc4ba32b4614831325dd6f072145d0341a469482ef2318325dd204fde3a867

  • SHA512

    4090b41dca0b2d2f8da0c8337f3bf9c41cf59a8913fe3ee932849d00a14861c21e4c3794f3346af41ef9b08edb90268f2d7f99dcad58be0dd4f1c01ef5e6b2f3

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlP:86SIROiFJiwp0xlrlP

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 031a08dec208456b7a66e529da9e6f25_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections