Overview

overview

10

Static

static

10

9dd78aa913...18.exe

windows7-x64

10

9dd78aa913...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9dd78aa91305232b61f6bee6f092158d_JaffaCakes118

  • Size

    2.6MB

  • MD5

    9dd78aa91305232b61f6bee6f092158d

  • SHA1

    e6a7b79b123a1b5dfe21ad1c959fd3551c58be07

  • SHA256

    a0003963b5ee089326e3664b1ea3bd09303ed155fc36c6531df2da3990a5c9ad

  • SHA512

    79fd5b8df03c6f444835707bb0e429081716a069d555788b0dde31f743bb9412c8f72b0a8b9f8326d53d7dd73084fa6f660b69ac115ee283cdbf8ea68b8bf664

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlZ:86SIROiFJiwp0xlrlZ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9dd78aa91305232b61f6bee6f092158d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections