Overview

overview

10

Static

static

10

170b127463...18.exe

windows7-x64

10

170b127463...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    170b1274639325886fedf1eb98d92009_JaffaCakes118

  • Size

    2.2MB

  • MD5

    170b1274639325886fedf1eb98d92009

  • SHA1

    bf0de7659f689b3f0f0c50a2ac733787037b90e7

  • SHA256

    ef4d0ad30b81d0c8500522c1343b0d2d85b3a819835df78df949b4314a6be595

  • SHA512

    ca6b502d89aac17e7d38675fe395e9f5ad201246e15d91c9b557d5a7f9e25e2953d5614e84f8da3c823c951f23a7e5a8e2cc0f285f41445fc3121e8806430e5b

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZz:0UzeyQMS4DqodCnoe+iitjWwwX

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 170b1274639325886fedf1eb98d92009_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections