Overview

overview

10

Static

static

10

62e24a5152...18.exe

windows7-x64

10

62e24a5152...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    62e24a5152c81f5fef3531bc66729cf4_JaffaCakes118

  • Size

    2.2MB

  • MD5

    62e24a5152c81f5fef3531bc66729cf4

  • SHA1

    e7d612daf35dc7fea16aa79687f0594cafb45a03

  • SHA256

    bd14e8b689dde07f112fd86f5797e96ad2d47055fc6a3054883a59825600c357

  • SHA512

    6a9fb5ea5af846f122311b4d1e4b09b2a2b6faaf1ffb8f361d8122057224a0d406171105f327889765032db3852b8faa512f53e10403dfbdfe73725cd5cbbf1c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZy:0UzeyQMS4DqodCnoe+iitjWww2

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 62e24a5152c81f5fef3531bc66729cf4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections