Overview

overview

10

Static

static

10

a5bdf4f6b6...18.exe

windows7-x64

10

a5bdf4f6b6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a5bdf4f6b6310f3ae08443eafea1889d_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a5bdf4f6b6310f3ae08443eafea1889d

  • SHA1

    888d2bb5ea3fe4eb5ca618b74bfc72ff02b70add

  • SHA256

    9e690eeea902fa7993a4a0bd80ebc1bf41881b157ef56117b9d105b3fd8db780

  • SHA512

    e33a7b634f22b78864d8b6f4fa70799adc9baf42377cfd7f78a4a0cfd32f234fefa49bc87211b0b9523882509a06c36c9dfadfc53afa60371880d64f993c8638

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlz:86SIROiFJiwp0xlrlz

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a5bdf4f6b6310f3ae08443eafea1889d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections