Overview

overview

10

Static

static

10

a266fd63e2...18.exe

windows7-x64

10

a266fd63e2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a266fd63e2a00a4dd9db24ca2b1fcb7e_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a266fd63e2a00a4dd9db24ca2b1fcb7e

  • SHA1

    9c38ef0de0346420513ab0bad3d0a9f212ef4d3b

  • SHA256

    79f27c395b9e0d71f2692172f845426b6099dd23173e1b4b726c37ad9c74c520

  • SHA512

    924cc002cfdcda4824661bbe02fc7487c14ec31f8f28bcb913aa3c5365d6cf98cafe35058b5e8ec39c0a7ae7f5bdf41a0e0bd113b7b1a3cfa7a19862286f24ac

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZz:0UzeyQMS4DqodCnoe+iitjWwwv

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a266fd63e2a00a4dd9db24ca2b1fcb7e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections