Overview

overview

10

Static

static

10

6b1a515738...18.exe

windows7-x64

10

6b1a515738...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6b1a5157389628e05780b5f67bde8e8f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    6b1a5157389628e05780b5f67bde8e8f

  • SHA1

    7a7f12c8c0a77e9edbd2d41be79a2634a1c77ece

  • SHA256

    2ac4b32105a95551c2a97cdbe15214cf80f5cd1f69741831821ac9d149e5284b

  • SHA512

    417564c88db0a9a1b20218632681140dae903864b077596f98ac79bdfd191998d8b20a2111b4099d3574afe4926ebcfd80d55b67ee23c0213948272ca13bee2d

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZi:0UzeyQMS4DqodCnoe+iitjWwwO

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6b1a5157389628e05780b5f67bde8e8f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections