Overview

overview

10

Static

static

10

a493834775...18.exe

windows7-x64

10

a493834775...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a4938347756a5b1ee55dffafcf581a3b_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a4938347756a5b1ee55dffafcf581a3b

  • SHA1

    74d321fe62945a4349e4929e6a49bda28a67120f

  • SHA256

    ee3d4f9d1a6c7f0f319273dea7239697c9b7df94294a9f868f7a6f062d1ef69d

  • SHA512

    ee2d28d36ff043ca2764ad1a19de3bec2b31207745bbca9e00361ff12e62ad57422fc9e2c246f8d2b581cedf31dbecea896de6c64d6d7ff761b609e328094ac0

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZZ:0UzeyQMS4DqodCnoe+iitjWwwV

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4938347756a5b1ee55dffafcf581a3b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections