Overview

overview

10

Static

static

10

1fbf80a515...18.exe

windows7-x64

10

1fbf80a515...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1fbf80a5151bd1aba522646925a6500a_JaffaCakes118

  • Size

    2.2MB

  • MD5

    1fbf80a5151bd1aba522646925a6500a

  • SHA1

    76e44b0a553d77c43b5f077d3b2c8436690ef788

  • SHA256

    a533b36e2a69d7fa58c3466e54a0fe137bad77286d6039cf68a912864ca94c60

  • SHA512

    23b2db299a4a915c1b79f3edc6bedda0d0aa7d23172d278abbfb19a1afd67855874cfc30e0997708ffbc6654a48a1b1d499715c6ceb05b9bbdb91f3d393d0bb8

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ8:0UzeyQMS4DqodCnoe+iitjWwwg

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fbf80a5151bd1aba522646925a6500a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections