Overview

overview

10

Static

static

10

041f807f3c...18.exe

windows7-x64

10

041f807f3c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    041f807f3c84478dd09fe649d3eac3d2_JaffaCakes118

  • Size

    2.6MB

  • MD5

    041f807f3c84478dd09fe649d3eac3d2

  • SHA1

    b35dd799171bdcda521ab179f041ace74a5295e1

  • SHA256

    8ebab1c39b4ecb6e166a0728c44ae01626f249d0fd65206c4836feded498d48d

  • SHA512

    43bb6e0ca750769301caa1e4925d32fd24000b4c8812e1b972a1c38e4972a0f1c89f1881a011f65ba8b6754eacb618264d85acd97a9b7cccc8a825c41aeea658

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlHnnnnnnnnnnnnnnnnnnnnnnw:86SIROiFJiwp0xlrlQ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 041f807f3c84478dd09fe649d3eac3d2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections