Overview

overview

10

Static

static

10

08c23d7ffb...18.exe

windows7-x64

10

08c23d7ffb...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    08c23d7ffb12139546e9b76846750509_JaffaCakes118

  • Size

    2.2MB

  • MD5

    08c23d7ffb12139546e9b76846750509

  • SHA1

    cc12b3bedfe3eb63ee0f4ddb2213191ff2b0a510

  • SHA256

    37ed5d5e8f147d5230e5e787baeb5f03956e8cd96b60e06c54b96835c01fdac2

  • SHA512

    8d4b19cc65b76e16e69fa370dda0b6145bc6ed2669b49902881b4f888b910179b71fe522d78dc91d82d956700640519ac610d409f4d5ced8f492b8afe617c681

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ8:0UzeyQMS4DqodCnoe+iitjWwww

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08c23d7ffb12139546e9b76846750509_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections