Overview

overview

10

Static

static

10

219677ed78...18.exe

windows7-x64

10

219677ed78...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    219677ed78d64df463195e8160414c5a_JaffaCakes118

  • Size

    2.2MB

  • MD5

    219677ed78d64df463195e8160414c5a

  • SHA1

    dfd83d2c20e2fa62c16af0885556d16060e78756

  • SHA256

    26f51ac3a60c44ed4b56f6e340a123168062fc01dec6e10c9c7e19189a12e8d7

  • SHA512

    7726e8499f72cdd7a94ba7f1be86a823392996fe35372c945f74b30f5dc230eaa462e14aab8107a2370520c2a502b37bcde1ce23db81d4fd567fda42d857c988

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ2:0UzeyQMS4DqodCnoe+iitjWwwC

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 219677ed78d64df463195e8160414c5a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections