Overview

overview

10

Static

static

10

13bef8c253...18.exe

windows7-x64

10

13bef8c253...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    13bef8c25346eeebb39c762c15fc75d9_JaffaCakes118

  • Size

    2.2MB

  • MD5

    13bef8c25346eeebb39c762c15fc75d9

  • SHA1

    ca3b401ffe5aba62f4fea6fa6d1df7f0b570efec

  • SHA256

    33e8006e4718261ce4a4e9593a35e48d20c83f8d341b72360f202040f2da360c

  • SHA512

    efd10adacddf78934b18581b0a1aaf00f534b20709b0124036db619d552d1b0a7af8fe1ab63443e9693325c197781c6a74f89c1074505aba5bafae6a69386d1f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZU:0UzeyQMS4DqodCnoe+iitjWwww

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13bef8c25346eeebb39c762c15fc75d9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections