Overview

overview

10

Static

static

10

27a59a34c6...18.exe

windows7-x64

10

27a59a34c6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    27a59a34c666ccd7c51259e70dc43e7f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    27a59a34c666ccd7c51259e70dc43e7f

  • SHA1

    ff6ec26485a352fb55a02aa43d111c8f2f19b01a

  • SHA256

    55420d7ff6ce3c54ea6c76338ec1a6d523451b3545610aaecc2deae3bed5ca14

  • SHA512

    630a1d27d7281e785a8222fe724487c27110d4b79b8272f8f9ed169a76d5c37c5e54b5dcd53ab3a59779a3067c1f180fa7fd75a614a0d21cd6ddd8d97852f121

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ9:0UzeyQMS4DqodCnoe+iitjWww5

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27a59a34c666ccd7c51259e70dc43e7f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections