Overview

overview

10

Static

static

10

6ab5e9a574...18.exe

windows7-x64

10

6ab5e9a574...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ab5e9a574a849dfa12bd3e5664eee53_JaffaCakes118

  • Size

    2.2MB

  • MD5

    6ab5e9a574a849dfa12bd3e5664eee53

  • SHA1

    06f2517e854abb78fd6b08071109b454281de94a

  • SHA256

    ec43643c11efc2d5ba7a71e077fb385d16677770e4b688318af72e81ef620a79

  • SHA512

    b2e3acbe634958f504a1e8e0221733a78c7956524633920ffb1d986e08a8324eb2cda898b93c0ff500ae7fa954abc013962f7b2555894b6820b2c7812b60b3f7

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWwwu

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ab5e9a574a849dfa12bd3e5664eee53_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections