Overview

overview

10

Static

static

10

0881b6d8cc...18.exe

windows7-x64

10

0881b6d8cc...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0881b6d8ccffbc9ea223406424a32997_JaffaCakes118

  • Size

    2.6MB

  • MD5

    0881b6d8ccffbc9ea223406424a32997

  • SHA1

    bdd5103d3b4dedcff11f54205827075900e468c7

  • SHA256

    4afbcd7e9354cc39bb10c4a144c0029381e8655a7bc4eea7ec6f078fbca94865

  • SHA512

    3d527b449531bbfd44137eae2599e1960fe234de5ecaac4d9367312d8e5146198985688557ff2b26ed2379be8ae631a6ef26ab2e78413bdacd546f80f8e3c8a4

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlJ:86SIROiFJiwp0xlrlJ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0881b6d8ccffbc9ea223406424a32997_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections