Overview

overview

10

Static

static

10

50332fd6a4...18.exe

windows7-x64

10

50332fd6a4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    50332fd6a4fbcf1a1d55882250b97a2c_JaffaCakes118

  • Size

    2.2MB

  • MD5

    50332fd6a4fbcf1a1d55882250b97a2c

  • SHA1

    dd5bff12e6041c227cccde5301dc9dc37fb156cb

  • SHA256

    d55a94979e501380a791646420eab8b698b36881ae1bf732265971cc5efecdda

  • SHA512

    d1404429e347aa6ab4f1fb3456211c6928f596b877bb770cd242589a2493e1205bfdd3a38e6278bbdf482eeebc070b8729292cda66cec02e7acd394dd7b44562

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZY:0UzeyQMS4DqodCnoe+iitjWwwU

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 50332fd6a4fbcf1a1d55882250b97a2c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections