Overview

overview

10

Static

static

10

489970efa5...18.exe

windows7-x64

10

489970efa5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    489970efa5c2691171f5cb6eeff74a76_JaffaCakes118

  • Size

    2.2MB

  • MD5

    489970efa5c2691171f5cb6eeff74a76

  • SHA1

    e51323da6f4cfa0739786b469f15266f35d356d1

  • SHA256

    499771a9b5c71cec5dce33431eb083a6ab3757905a2115c9e66180f2c43e19a8

  • SHA512

    52ae09b1f4235d655ab1a167a8b135727c78d611f61c6872d553faed9b47b365c32fc22dc1d227d8345dcff6746c251ce5ae389edb1656d627691d1bf9d6964f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZS:0UzeyQMS4DqodCnoe+iitjWwwe

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 489970efa5c2691171f5cb6eeff74a76_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections