Overview

overview

10

Static

static

10

659d324c88...18.exe

windows7-x64

10

659d324c88...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    659d324c8874d97980f05a45955bf0c5_JaffaCakes118

  • Size

    2.6MB

  • MD5

    659d324c8874d97980f05a45955bf0c5

  • SHA1

    0cfcf1ebd6f3ddf5b860c25d09da6f8594215ef5

  • SHA256

    d2b560c30cd38ac8a83cf4eda2c99761460cc6fef4ce343f2220fdac4c30a03d

  • SHA512

    d01520eb4f0a8d163b370dbab0bdbf34395a3bbc30c206c7fb8eadb0a2f46ec69eccbd238720bb919effbc94ab70b2bbde020f235a4c53817ff8a1ac0373d66d

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlF:86SIROiFJiwp0xlrlF

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 659d324c8874d97980f05a45955bf0c5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections