Overview

overview

10

Static

static

10

a56dae7c98...18.exe

windows7-x64

10

a56dae7c98...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a56dae7c98d8b6893a6448730ce6d486_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a56dae7c98d8b6893a6448730ce6d486

  • SHA1

    816f226df028c1e1940b39b4df59c79ccd464afc

  • SHA256

    64beef9d4c73e8e9bfcb8f6cde87d790412db05a02abd852afa548aab6af10d6

  • SHA512

    25e1ff29296daaccbe40b9b1d669949e8316aa775035805ea9965a1e665370a8ed866d5cf3045344c78ac110452359846cc73236ac3b32b8b965c57786de8788

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlI:86SIROiFJiwp0xlrlI

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a56dae7c98d8b6893a6448730ce6d486_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections