Overview

overview

10

Static

static

10

0cf0a32ea7...18.exe

windows7-x64

10

0cf0a32ea7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0cf0a32ea7a2523060abe8808b374c42_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0cf0a32ea7a2523060abe8808b374c42

  • SHA1

    4b6aabb4f5ed1159fc774ce211308eb8f7c3733b

  • SHA256

    da1ef0f943a3372621363ff21fc1d2104b1167d3f0ffe13624641498932b8fd7

  • SHA512

    2d357ca8851d2d0f49c8a81940929e5a7905706019f09ff46df99ae4ec07dcba1ad4e5fdc6677a2fc09bf3dd1956818786c8d3d401f5d489b6c89c545aa15092

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZq:0UzeyQMS4DqodCnoe+iitjWwwO

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cf0a32ea7a2523060abe8808b374c42_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections