Overview

overview

10

Static

static

10

4034fd8440...18.exe

windows7-x64

10

4034fd8440...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4034fd84409c7d5b37d0ddc8f13190a3_JaffaCakes118

  • Size

    2.2MB

  • MD5

    4034fd84409c7d5b37d0ddc8f13190a3

  • SHA1

    ddc2ab35e7c75f1132cc1819451b22bb77323f9f

  • SHA256

    0873b9ca73d273bcb51ae42c4096add134715ab579ff5efa97cbfd3f5847a398

  • SHA512

    c46dbc3e91a384e2040fe6abb488f61c71cb14b22fa74a850bb02d3acfdd937fca7579e66ff8b73348dda5c31420bc54ba539061938578d371a1d067df82b007

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZL:0UzeyQMS4DqodCnoe+iitjWwwH

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4034fd84409c7d5b37d0ddc8f13190a3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections