Overview

overview

10

Static

static

10

070fed71a8...18.exe

windows7-x64

10

070fed71a8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    070fed71a848d64f7e4ca43434383681_JaffaCakes118

  • Size

    2.2MB

  • MD5

    070fed71a848d64f7e4ca43434383681

  • SHA1

    8f17eb3bdeb8a4d31e5e4c9025599802c108f4a9

  • SHA256

    52f4691eac6c5caf586dea1d6226b95ad9914b750cf853dfcb24b0aed5d0df4b

  • SHA512

    2900098c32da391de163cb3fc98b06c3a012f7008fad74c0e13e7e8a0ee18aabb39cc810c34e06e8c7243453af17923eae3fdd84ff4b051a795eb97dffa45c60

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZD:0UzeyQMS4DqodCnoe+iitjWwwn

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 070fed71a848d64f7e4ca43434383681_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections