Overview

overview

10

Static

static

10

3bd2457aa2...18.exe

windows7-x64

10

3bd2457aa2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bd2457aa244ba728ca0d4b38d6eeaab_JaffaCakes118

  • Size

    2.6MB

  • MD5

    3bd2457aa244ba728ca0d4b38d6eeaab

  • SHA1

    cfdbd62b2c475d73aba44b0406b9a92354c2eb2e

  • SHA256

    9b22a64c58d362e93a57072aa1469e641575994f84437366f39627ac58c6091b

  • SHA512

    fc92ba63ee12a0df01b8ce5f4034d8a6f5d04e1a659a7c1c08deb65f3dc791af221d6969dda8d920975425e0c1c923ba075011ac5a16b3399345e70fa1c95d3b

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlC:86SIROiFJiwp0xlrlC

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3bd2457aa244ba728ca0d4b38d6eeaab_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections