Overview

overview

10

Static

static

10

3169e2d1ee...18.exe

windows7-x64

10

3169e2d1ee...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3169e2d1eef014d837b7dbb505253399_JaffaCakes118

  • Size

    2.6MB

  • MD5

    3169e2d1eef014d837b7dbb505253399

  • SHA1

    54963d6b500a4e463593c544d4a6123dd002f08a

  • SHA256

    d5560f6e9abb730609081ee522d9a48f7f51694d0f1969252a7a893d44c2565f

  • SHA512

    398c0b87adad0597125657dafd04a9153f3120c59e62d102cc1e7922d4731ddcc1df5e8a59b1d11ff5350cb275f17229b4bf5241564cad08d6b28c14d359afb1

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlo:86SIROiFJiwp0xlrlo

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3169e2d1eef014d837b7dbb505253399_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections