Overview

overview

10

Static

static

10

a0d42a4b8b...18.exe

windows7-x64

10

a0d42a4b8b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a0d42a4b8b35cec1a2b02f7dde7eec2f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a0d42a4b8b35cec1a2b02f7dde7eec2f

  • SHA1

    271ff5f8f8d4cf23f7fc4d0da228b887008770b3

  • SHA256

    b4b8f64335c4667784d8f0a97fb4a2f961f43baf8aedb2d5fc214024d2b2d85f

  • SHA512

    99d5ad2a32f8144bc5b21336c59654797d0f2c560717f8dbbbcd679e065a29762de86eb8b5c8c16b6ab6f962b8ad244f3c99e2e0033987a345750384c9400d7e

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZQ:0UzeyQMS4DqodCnoe+iitjWww0

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0d42a4b8b35cec1a2b02f7dde7eec2f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections