Overview

overview

10

Static

static

10

4b80ead74a...18.exe

windows7-x64

10

4b80ead74a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4b80ead74a8b1062e62472d0437de2a2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    4b80ead74a8b1062e62472d0437de2a2

  • SHA1

    7c84197a24788c1a62f05abf493af7dd83b985bc

  • SHA256

    0f4b973c8f8afd6c8a6381d67151e925d0101eabd19a98e80dbfbd5761823afb

  • SHA512

    b6a6d34768f23ee4450212478d441747b54ae6c8f674701395267508578370dcd347b52e40ef9ac03209ff205d2f062bf3836d0fc7a3f609cd552ab9dcf28c3c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZO:0UzeyQMS4DqodCnoe+iitjWwwi

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b80ead74a8b1062e62472d0437de2a2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections