Overview

overview

10

Static

static

10

202b212a21...18.exe

windows7-x64

10

202b212a21...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    202b212a2180520cef119a04cae4b26a_JaffaCakes118

  • Size

    2.6MB

  • MD5

    202b212a2180520cef119a04cae4b26a

  • SHA1

    7aa663b5ff45ad6447b50a038542216c04154fb2

  • SHA256

    3871f20a4abdf5ef8db7d92a2d866a9282c1b48af4f780a2472edbef6321882b

  • SHA512

    631dac5a571192ff406b7a969fdbcbcb5012a2ff3002e9a9666e6d06c73a25cfc3eac39949cc9aad8047ee66dd53830fed6e918a74096c15d5401bce052829a7

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlA:86SIROiFJiwp0xlrlA

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 202b212a2180520cef119a04cae4b26a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections