Overview

overview

10

Static

static

10

362eb8fa7c...18.exe

windows7-x64

10

362eb8fa7c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    362eb8fa7cba9956976ce8851b21b6bb_JaffaCakes118

  • Size

    2.2MB

  • MD5

    362eb8fa7cba9956976ce8851b21b6bb

  • SHA1

    bd6865879485fbd90a8b87b26f8711af82e4bacf

  • SHA256

    ab82f001cc3df8efa94125443762638ecd7639b0b4d66e1f42124eb998cc9f14

  • SHA512

    903e811c25308ba17a51603f04f01f7a1d3d220b78ad380661c6d62d6188388d2a883291dc470ddb83a8dbd39af0f8e9fcbfbef0fbe7c96e81532e40a92811d3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ/:0UzeyQMS4DqodCnoe+iitjWwwr

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 362eb8fa7cba9956976ce8851b21b6bb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections