Overview

overview

10

Static

static

10

a5a6840908...18.exe

windows7-x64

10

a5a6840908...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a5a684090847bd26094bb4f0051ecc1d_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a5a684090847bd26094bb4f0051ecc1d

  • SHA1

    cec35d877d39466dd482202db3101dd3a6655a3d

  • SHA256

    c0d605d04c7c976793884dbcae25e2442c95936fada213eb655f3df796386caa

  • SHA512

    9e2b9aea1907fef672d5e9f0b2869ad39f49222a7a84502caf1a3353b97340353f1d82d631515d22cc3208de3ea4add96494daa60d963476d5a83a58fb9f4ff2

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlt:86SIROiFJiwp0xlrlt

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a5a684090847bd26094bb4f0051ecc1d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections