Overview

overview

10

Static

static

10

a40050c2a1...18.exe

windows7-x64

10

a40050c2a1...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a40050c2a1cb9f9b82ae313613def13a_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a40050c2a1cb9f9b82ae313613def13a

  • SHA1

    99ae287dae8cf26d4a0ed998faa1347761a727a3

  • SHA256

    a5a25daff34aa3358c6c19fe437f3fb5e1111693d883f804cc064a7d5bdd1c9c

  • SHA512

    25b195a1ff3ee645497dedf9a309768969a73e8e91ad4efcef555ae2fd3d2ad9e430a0fbd0b601ecbec9ca366dc87cbaa94423b966c8831c48356de63bd64d76

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlQ:86SIROiFJiwp0xlrlQ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a40050c2a1cb9f9b82ae313613def13a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections