Overview

overview

10

Static

static

10

280039d164...18.exe

windows7-x64

10

280039d164...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    280039d164c8faa3590973513477b676_JaffaCakes118

  • Size

    2.6MB

  • MD5

    280039d164c8faa3590973513477b676

  • SHA1

    f525a8db52799006c9b51446a74c3d40b2fadc0a

  • SHA256

    fa54477a8d9c3bc2c9831f8e51d377c53dc7ff4cef5932bdc3f99cc325255444

  • SHA512

    153de10d2801ae02b4c78ddf0a51c2750223e3e839dbff2873897d4be47ea497f1905db95dacbbaa6bf2815d08fafdb412ca0370a0e29080e0b38f760c5e56d3

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl6:86SIROiFJiwp0xlrl6

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 280039d164c8faa3590973513477b676_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections