Overview

overview

10

Static

static

10

a286c39065...18.exe

windows7-x64

10

a286c39065...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a286c39065c3ec14f7e41dc0340f4b4c_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a286c39065c3ec14f7e41dc0340f4b4c

  • SHA1

    1fac85867fefad842a151c6f6cc770e9a9eb7a3d

  • SHA256

    9d07d954ff9ee40448332f67047e736c46b5fe411e075d41e6cfda93faf8621b

  • SHA512

    1b5a49a3547f79b6cc931d0c85aa20febc53b59d6e1041fbd6e50aabd40a3e4d86671cae31ddee75fa694c89cc55d243c2103c0681ac7d7cc10b6ecef8541c10

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrle:86SIROiFJiwp0xlrle

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a286c39065c3ec14f7e41dc0340f4b4c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections