Overview

overview

10

Static

static

10

159471bed9...18.exe

windows7-x64

10

159471bed9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    159471bed9d3d81e7ef6fe2a6391a083_JaffaCakes118

  • Size

    2.6MB

  • MD5

    159471bed9d3d81e7ef6fe2a6391a083

  • SHA1

    868a7748cafac3dfb53f19f2c1962ed83f36ae26

  • SHA256

    9bb36e703449e87de3102ab0453922a39ef3655668313d15e4ec88f215a3d364

  • SHA512

    4363579fb1b38a449d44aae757fc8c07a92a00b638c319bfb5cc7b419ac5f08c808327e6187ec2bd5d1d3d39159e2f58c4bb5b5f26b7fef9b855c24acea01ce3

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl7:86SIROiFJiwp0xlrl7

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 159471bed9d3d81e7ef6fe2a6391a083_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections