Overview

overview

10

Static

static

10

1eb5613aa2...18.exe

windows7-x64

10

1eb5613aa2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1eb5613aa27dd7cb764a99f518261920_JaffaCakes118

  • Size

    2.2MB

  • MD5

    1eb5613aa27dd7cb764a99f518261920

  • SHA1

    846c48cf1f64fb083602c01c7be63294a0ba4b61

  • SHA256

    5feafb888c56f38c02d963d674f63dbebbf46178c448092c4483d4e00295ad60

  • SHA512

    1371c46c540e1f0bda2d6c817ea4a3372971e01bee215eba06d5a6edf1f4ad57dc67d0af7898e8651ecb8cd666d5661ba18a26f6f4b28f96e00f2e353a34b8e9

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZz:0UzeyQMS4DqodCnoe+iitjWwwv

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1eb5613aa27dd7cb764a99f518261920_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections