Overview

overview

10

Static

static

10

a0c80d0a89...18.exe

windows7-x64

10

a0c80d0a89...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a0c80d0a89ac0890cbd2fdcc593b192d_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a0c80d0a89ac0890cbd2fdcc593b192d

  • SHA1

    0d40ccaf628841cf5aefd8a8291471a1316dc7a3

  • SHA256

    b39b2baae4d3a06c5fef464f5a499bb5c41466ea0ade6f202a5ce0b2e3ba8a74

  • SHA512

    462c01451de8ac7b9549e5d9dfe3efcabf6cadfeb853b7b92954b2159d43cdcf6cf079e8e8e5a86ba77ae5e084207f0329abb542df777f91a226a7863cdaaaf0

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlP:86SIROiFJiwp0xlrlP

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0c80d0a89ac0890cbd2fdcc593b192d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections