Overview

overview

10

Static

static

10

75e986a3da...18.exe

windows7-x64

7

75e986a3da...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75e986a3da2bfdba1bae727f0ea8b1fc_JaffaCakes118

  • Size

    2.6MB

  • Sample

    240526-srxq1sbg85

  • MD5

    75e986a3da2bfdba1bae727f0ea8b1fc

  • SHA1

    108c120cd318137507e77684a398e02ef672f7be

  • SHA256

    e553d80932af2c7dcda42a0ce9f110f5537f3cf661aee3e96539732d0c602301

  • SHA512

    afe18b91c7665e6a5a4e36c4394aa22b8d618daafb2ea83b69451c93fa8b73958e0751630d1c0a5dae1f44907483adb680c79da80d609a726f648c5792a3ad6d

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrly:86SIROiFJiwp0xlrly

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Targets

    • Target

      75e986a3da2bfdba1bae727f0ea8b1fc_JaffaCakes118

    • Size

      2.6MB

    • MD5

      75e986a3da2bfdba1bae727f0ea8b1fc

    • SHA1

      108c120cd318137507e77684a398e02ef672f7be

    • SHA256

      e553d80932af2c7dcda42a0ce9f110f5537f3cf661aee3e96539732d0c602301

    • SHA512

      afe18b91c7665e6a5a4e36c4394aa22b8d618daafb2ea83b69451c93fa8b73958e0751630d1c0a5dae1f44907483adb680c79da80d609a726f648c5792a3ad6d

    • SSDEEP

      49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrly:86SIROiFJiwp0xlrly

    Score
    7/10

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks