Overview

overview

10

Static

static

10

0ea49e5efd...18.exe

windows7-x64

10

0ea49e5efd...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ea49e5efd85026f919fc20695f46663_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0ea49e5efd85026f919fc20695f46663

  • SHA1

    11e7edefca9c9d949fee00441862e002bcbb2ead

  • SHA256

    bf38073757895f21515293d97c0dbc1cf02b77f5ce784095167cb303a54758d7

  • SHA512

    a14b312242b360d421943729fa5bb68e73dcef419afaf5d6fa9d0c827ddf11a5daa33a595d22d6b5581b9dd9049a3ad5069ec23cd7773ce8ac89f77a782d1071

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZT:0UzeyQMS4DqodCnoe+iitjWwwn

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ea49e5efd85026f919fc20695f46663_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections