Overview

overview

10

Static

static

10

266a2c917a...18.exe

windows7-x64

10

266a2c917a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    266a2c917a6b9fdc25820128a8e41d98_JaffaCakes118

  • Size

    2.6MB

  • MD5

    266a2c917a6b9fdc25820128a8e41d98

  • SHA1

    39a315a35ba96414d5755c72c8936787d1fd5a08

  • SHA256

    1a615cbb71bf261ca221d4852ba17840533868fb3c9f78e2dff1ddf1db75a3f5

  • SHA512

    6980a70f1d535f0156014f2e9eccb14bd544db37b341196330ccead5c2b2ecc0dd7bece84f1a4b258c9132dc5ae5c2439f865eeb9f8cac1f31f0e18d4648a3be

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlo:86SIROiFJiwp0xlrlo

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 266a2c917a6b9fdc25820128a8e41d98_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections