Overview

overview

10

Static

static

10

a35f71ba0c...18.exe

windows7-x64

10

a35f71ba0c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a35f71ba0ccfb086f8d1a78cb6500918_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a35f71ba0ccfb086f8d1a78cb6500918

  • SHA1

    e43e1e361e5dff9ec8a797bd1b4d4f9d772ad801

  • SHA256

    b1227b088a11430339c22d07dca83f95d687df94a39454226a088c913956c0a7

  • SHA512

    28b991b4405387e8be3a8689f5fb44b569aa16a60e4bc385be4dd102d04c506a0f679ee433bc220eab9ad28378cc9786c567446deda880a8ea3c3bfb269c2d73

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZo:0UzeyQMS4DqodCnoe+iitjWwwk

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a35f71ba0ccfb086f8d1a78cb6500918_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections