Overview

overview

10

Static

static

10

a02a8aeb5f...18.exe

windows7-x64

10

a02a8aeb5f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a02a8aeb5f95dd7d7e54ccbd1d7c5569_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a02a8aeb5f95dd7d7e54ccbd1d7c5569

  • SHA1

    af4df28b8e24c22e66989a621b60c3a34d5676e7

  • SHA256

    301f12ce31bb84cb36270fd2eb2d823871e0132e58a9c339ec53adfea709e62a

  • SHA512

    60d2e3eb6ad2189f773675337954522caaa4f36571eb7641360104e27b6027a4f8b23d192d781df7c86b26e82b08be154cf62f11b2d8e2159b4c2f8156f7f87e

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZq:0UzeyQMS4DqodCnoe+iitjWwwe

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a02a8aeb5f95dd7d7e54ccbd1d7c5569_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections