Overview

overview

10

Static

static

10

1167a76b11...18.exe

windows7-x64

10

1167a76b11...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1167a76b117541ceaa803ebf990b9619_JaffaCakes118

  • Size

    2.2MB

  • MD5

    1167a76b117541ceaa803ebf990b9619

  • SHA1

    0a4a9670a63ed16cd47ce17a7fe66d8cd0cbdd3b

  • SHA256

    388da5eabdee629416c91f7bfcca9e1e405503d8fb4232a644e590e440737ce2

  • SHA512

    dd8230bcb72b4db31a22dc3750df5719993d71b23a1c89d683aa4ae477b9c221c2fedae359422954314c2467a75d00d2d00b2a7199f341cd27f9758479ab919b

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZX:0UzeyQMS4DqodCnoe+iitjWwwL

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1167a76b117541ceaa803ebf990b9619_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections