Overview

overview

10

Static

static

10

9324c5a686...18.exe

windows7-x64

10

9324c5a686...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9324c5a686e0e5427f8d36a027e6e697_JaffaCakes118

  • Size

    2.6MB

  • MD5

    9324c5a686e0e5427f8d36a027e6e697

  • SHA1

    13e88e669b748470d71870a1d0f4ab02090733b5

  • SHA256

    0bbf0ae157e66095b2b7ee87baa7624971920e80a5b368d0b942cbc4ae3b23f0

  • SHA512

    5c3cff979259e64ec50b931a0bdde97d8936e89eef09be8eda04782564dd37c731b7ccc60fcfb3326ea6579886bcbb5bf426f1e832680612a2f854210c36f8d6

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl3:86SIROiFJiwp0xlrl3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9324c5a686e0e5427f8d36a027e6e697_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections