Overview

overview

10

Static

static

10

a086a07e4a...18.exe

windows7-x64

10

a086a07e4a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a086a07e4abeb809d715632585acf65b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a086a07e4abeb809d715632585acf65b

  • SHA1

    f0ac333d821a50e455269338f7f5d1f2c10e141e

  • SHA256

    58c22d82ce02e20503def1b4e8bf7e7d512627559cd65b7f432166214e75953d

  • SHA512

    ecd7cadd9069de7158e139700899144a60c222b7c6387068f149af9b22165bce508efdb138b2bcea8d8cb8e9acc9f8b5cbf6257fac39a6d57a2a9f5ce99fcb32

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlV:86SIROiFJiwp0xlrlV

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a086a07e4abeb809d715632585acf65b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections