Overview

overview

10

Static

static

10

a3ad97f6e6...18.exe

windows7-x64

10

a3ad97f6e6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3ad97f6e69bc733a4c378b000d17c78_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a3ad97f6e69bc733a4c378b000d17c78

  • SHA1

    f00acd0a5d65b37d7146bdc19b18801e30443355

  • SHA256

    17b8eeecba18040b3a9362589df7e1a5a31ca7a6a719c4bb3da969b812116aa9

  • SHA512

    6527b04312aa127f954097086336695760144641ae0a365ee48b4cee06ce638e9f4471ec0e678c636348dc75747ae57e06dda1f3fe8e8a44611d75cc43523c80

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl3:86SIROiFJiwp0xlrl3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a3ad97f6e69bc733a4c378b000d17c78_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections