Overview

overview

10

Static

static

10

a1f141d199...18.exe

windows7-x64

10

a1f141d199...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1f141d199c19ba1111e09b21f8b3cd2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a1f141d199c19ba1111e09b21f8b3cd2

  • SHA1

    5abcd17bd31ef1676bd9cc33c6ddb6330d896585

  • SHA256

    e6786e1de3a32189f524f27732a00437ba5777c1febb9fb0f2144ed4a48c9019

  • SHA512

    4d7008edd2461e6d431668cb05d87bd1734d75747de7daec225ef8e3821a466a2726e51d435b768009bdc5ca3f3de6d5bca048ceb4ed50b01904439c86868c83

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZM:0UzeyQMS4DqodCnoe+iitjWwwg

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1f141d199c19ba1111e09b21f8b3cd2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections