Overview

overview

10

Static

static

10

1059-c6df0...1b.exe

windows7-x64

10

1059-c6df0...1b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    502e794b9bc9273121179ea53767637c_JaffaCakes118

  • Size

    845KB

  • MD5

    502e794b9bc9273121179ea53767637c

  • SHA1

    e9d2ec53d8cf6c8d141fe91d8a1696f3fd71f1b7

  • SHA256

    0d83427f9a871dd2129b38030e8ec94f762ec20b0c12279c7f64280f01dc34f0

  • SHA512

    24232dbcb5335b6cdfde1062b142167418cd27d4fea1ced154525abb8d916812c190bf5bdfb9d7fab9a3b3eddf548ab2393ea233058cf459f862eaa3a07485fa

  • SSDEEP

    24576:rBVXsqGqLk+b4R7W/gvtprW3B5sBnh3rAIP/:zXsILLS7g2t9WR5shh3rB

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 502e794b9bc9273121179ea53767637c_JaffaCakes118
    .gz
  • 1059-c6df0da7104b79928894b0ce28222da15384f91b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections