Overview

overview

10

Static

static

10

056df40fd0...18.exe

windows7-x64

10

056df40fd0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    056df40fd0748f53510156f1b43fa8e0_JaffaCakes118

  • Size

    2.6MB

  • MD5

    056df40fd0748f53510156f1b43fa8e0

  • SHA1

    6aae80790480c5bddf59682925ca696069e388d2

  • SHA256

    a4edf7d4aee7d1b229563d024d866b9aa61ef31dff4305adc832b64af3470a27

  • SHA512

    42588a7634a2e79eba07c2fb4c93a628789fba222303dfb01fb00add0794445a1079b27ca98d5ec910bd581630d4bd7d7a24a5a3ec4d91c9a32df58182265397

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlO:86SIROiFJiwp0xlrlO

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 056df40fd0748f53510156f1b43fa8e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections