Overview

overview

10

Static

static

10

a3578e0ce2...18.exe

windows7-x64

10

a3578e0ce2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3578e0ce2db9392c3689184b09230eb_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a3578e0ce2db9392c3689184b09230eb

  • SHA1

    f28c2c2bdf336312575692657242208e83a5ffdf

  • SHA256

    471b628418c38daea02fc901eb1b24ab02446c80000c5a8350d2b0046fb08dae

  • SHA512

    97e14bbe1e985dcc322e834db2124d31c350999098f545f689be3188ea4fd0a6e90001cca5525acb2774f549eef34554496ca8b09ebd2edb6af25c84d2ebca3d

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZM:0UzeyQMS4DqodCnoe+iitjWwww

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a3578e0ce2db9392c3689184b09230eb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections