Overview

overview

10

Static

static

10

a3cbb556f0...18.exe

windows7-x64

10

a3cbb556f0...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3cbb556f0b4be09eb5d0e65b0ea5be3_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a3cbb556f0b4be09eb5d0e65b0ea5be3

  • SHA1

    295c8ec0f41794342d1d1b8f8330f5a738ff565b

  • SHA256

    8b71d6ccf621db86e0458ba4725644ba18550853f587aaf100f4c1ba9e2c8943

  • SHA512

    167b185a14e43c656fbc83d67df8fd9d9a494020fc2ae019f327c6fb7d2b05129795bcd21db73e92f9b67d0843771ec2a7be1f3a998f0d992bfe868654566545

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl6:86SIROiFJiwp0xlrl6

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a3cbb556f0b4be09eb5d0e65b0ea5be3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections