Overview

overview

10

Static

static

10

0f79f38453...18.exe

windows7-x64

10

0f79f38453...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f79f384532a57879d72e9ba26148907_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0f79f384532a57879d72e9ba26148907

  • SHA1

    9d4c6833d1359ae708974929ffd32c6ae2264251

  • SHA256

    fdb5c0d0f319220d35c5b7fc5060e252d2b70053ecb7b2dde1dfdbccbd4e7627

  • SHA512

    86a4398fb309f217f5681e010d247ba337166ae34bdf95758bce5c163b20e7ecf6c905e1c79d75912eaf700ae83461d06112b6802c1d3b74be588ab3cb3bd39c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ8:0UzeyQMS4DqodCnoe+iitjWwwg

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f79f384532a57879d72e9ba26148907_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections