Overview

overview

10

Static

static

10

0b275ec59a...18.exe

windows7-x64

10

0b275ec59a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b275ec59ac4e9699a84b9869149d393_JaffaCakes118

  • Size

    2.6MB

  • MD5

    0b275ec59ac4e9699a84b9869149d393

  • SHA1

    c53e3414745dc2cd9282ee655b9ececfecd51a65

  • SHA256

    8756d85536d1eb3049689b77368a7b74bc8569d86e945714c65e7708b4c60cfe

  • SHA512

    cc8fb98e3652b030fbd7ef2ee914722caa34656e026145e8b288add336f27ec4c13c2e920d8d3069df9d4110fe72244f070af5827e1263a981d2f4f8361062ad

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrli:86SIROiFJiwp0xlrli

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b275ec59ac4e9699a84b9869149d393_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections