Overview

overview

10

Static

static

10

43a83904e5...18.exe

windows7-x64

10

43a83904e5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    43a83904e558fe734ea9f681185dce06_JaffaCakes118

  • Size

    2.2MB

  • MD5

    43a83904e558fe734ea9f681185dce06

  • SHA1

    77bfad33e0c3618df57d8e20ad18568f1c1a2836

  • SHA256

    f4a1ca3a2a712ba0774a8a477dd1dfaf56289d70ffeddb0d0431588e331119cd

  • SHA512

    cac21fa14116078f6308698c9576ac40dd90ed1d32619cf31274a7d600930c7def54911125d2054f9c04871dd68796dc0016b671d11773ad394f5154ca570f1f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZZ:0UzeyQMS4DqodCnoe+iitjWwwF

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43a83904e558fe734ea9f681185dce06_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections