Overview

overview

10

Static

static

10

8af6570f15...18.exe

windows7-x64

10

8af6570f15...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8af6570f156062a09bc4b30048da4e1a_JaffaCakes118

  • Size

    2.2MB

  • MD5

    8af6570f156062a09bc4b30048da4e1a

  • SHA1

    5f40cd0b7ee6f445845f56221247c17e7e854c52

  • SHA256

    1d1dbf342e60bdcb31d63ab018a3fa4b7d4b0e088c38942c2864479e4255360c

  • SHA512

    6f0e80521c7f8c6e64aa541e941137d93029587e762efe494135b788ef68808d981c48d1014d82024a6f0a49cc49887bf0fed671c67d8d46e4a87d81fdde4bdb

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZU:0UzeyQMS4DqodCnoe+iitjWwwY

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8af6570f156062a09bc4b30048da4e1a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections