Overview

overview

10

Static

static

10

3b6f7e9c06...18.exe

windows7-x64

10

3b6f7e9c06...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3b6f7e9c0670d10f9e8ec10bbe21789a_JaffaCakes118

  • Size

    2.2MB

  • MD5

    3b6f7e9c0670d10f9e8ec10bbe21789a

  • SHA1

    68ad11fa8cfc95a229e317b65f4d58ead81a9474

  • SHA256

    39df56196fddb20cd6bc611a21867057addb5b17905cc8e75ff02626bc1cf58d

  • SHA512

    e71e0fd6e3ec7e2328a1e95efc5ab01833091f7120c4f5d49a65f4a48995c5f722979ee369638096fe90f4f65dff3e304f034bd8c6f0e1079a63eba2f4482ed4

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ9:0UzeyQMS4DqodCnoe+iitjWwwB

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b6f7e9c0670d10f9e8ec10bbe21789a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections