Overview

overview

10

Static

static

10

0de2f89870...18.exe

windows7-x64

10

0de2f89870...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0de2f8987034a7092fecf40ba5a65c45_JaffaCakes118

  • Size

    2.6MB

  • MD5

    0de2f8987034a7092fecf40ba5a65c45

  • SHA1

    527ca9c7c6ed311453c4e0d13e91b4a944b60483

  • SHA256

    d8caaad3c1b5ef08237e362c4542b38e581d68be0d354adbabba89ef4b58624b

  • SHA512

    b283a7e361af9f34aad0b98d6d39cec997cb374a9754d47b8a66016176225502b08ed4b50024c34d2a392e82f86f526323b324e0c8e45cb176dc5b3775358238

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlz:86SIROiFJiwp0xlrlz

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0de2f8987034a7092fecf40ba5a65c45_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections