Overview

overview

10

Static

static

10

3ec5843c63...18.exe

windows7-x64

10

3ec5843c63...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ec5843c63b036cba5e4c0be803ca127_JaffaCakes118

  • Size

    2.2MB

  • MD5

    3ec5843c63b036cba5e4c0be803ca127

  • SHA1

    cbf1cefdc176f16ab0986c4099d6f4b6a798758f

  • SHA256

    f6e3ee7c0452936140b8564136015dd96a2cb8e3fda880241dd7a5068b0af121

  • SHA512

    c9fe2dbc1bc6194e94774035f82edaefd8e6b0105168cc47b54b66d1186a9d167bd16b2e5dbfd3e1031a7f15b437d2b917af751bdc7e34e0ede8eaf4408c4653

  • SSDEEP

    49152:0UzeyQMS4DqodCnoe+iitjWwwkQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQn:02emwkQQQQQQQQQQQQQQQQQQQQQQQQQH

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ec5843c63b036cba5e4c0be803ca127_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections