Overview

overview

10

Static

static

10

04a70f6fa2...18.exe

windows7-x64

10

04a70f6fa2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04a70f6fa253458940c857253aacbb84_JaffaCakes118

  • Size

    2.2MB

  • MD5

    04a70f6fa253458940c857253aacbb84

  • SHA1

    c8d72aa387ce2b05a6a1768c01c975a47c237931

  • SHA256

    7b720ccf4119add65c056b698c8cd2a1c0d9c421816cbcc39ba575f8c4001cb5

  • SHA512

    bfe344074a9a6c220bced8a8e2f3e6473b47f92d156ef97a7497de325eaed0c5eb9ca24dfe5ac2685490135a57e427367ae221bc44f285d0f9a710c7435f75de

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ/:0UzeyQMS4DqodCnoe+iitjWww7

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04a70f6fa253458940c857253aacbb84_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections