Overview

overview

10

Static

static

10

2a3a251dc7...18.exe

windows7-x64

10

2a3a251dc7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a3a251dc7d127e6bebd5a7559bf7bf1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    2a3a251dc7d127e6bebd5a7559bf7bf1

  • SHA1

    1cfd5dfd5c12bc20bef5f0deed27d9135e6d3258

  • SHA256

    cc51df8e1c900b5bbd3e46769a152bad6c225537f1bbf64beb1d4963392f3652

  • SHA512

    45d32fe35e1ee3fa4c5c002789647188b22ccc00803ea708f3684035218a09d1833da06a0f919d73240c3bfef04141c3228d70e17e1ebdf1003e43c2a4e965bd

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZt:0UzeyQMS4DqodCnoe+iitjWww5

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a3a251dc7d127e6bebd5a7559bf7bf1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections