Overview

overview

10

Static

static

10

a4556baa09...18.exe

windows7-x64

10

a4556baa09...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a4556baa09287892ccb862a462cc908d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a4556baa09287892ccb862a462cc908d

  • SHA1

    b420fe54c9dea03529e84e3d0518425d5b1aa0a0

  • SHA256

    42f10c0b663895ab32a821dca2ae8a163ad16f3c20fbe4e18af71cca2f98403c

  • SHA512

    40cf0c85d4eca5d98fd41e572210e7aef1889edcb5a842396b387e95fef20dc50b36e8039d3a0c5a93b8eaed8b6b4d5d1af49d48879188f516f4abe6fde80145

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZk:0UzeyQMS4DqodCnoe+iitjWwww

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4556baa09287892ccb862a462cc908d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections