Overview

overview

10

Static

static

10

a5caf4503b...18.exe

windows7-x64

10

a5caf4503b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a5caf4503ba137009068d61a0dd8c081_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a5caf4503ba137009068d61a0dd8c081

  • SHA1

    fad9fe1a85d0e91e2abac1286f36ccb8ef8ae366

  • SHA256

    676990a14172713492e93dec816a6ebde87d4280a6b53b03451e9c2c70295312

  • SHA512

    1346b22d6ab57a83192a2addfc93750fe216aabd444d9dc5957d292479109dbf70299a4185efaf731f8aeda8184c77d047f4183057e52af58e6735dabb9a4670

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrla:86SIROiFJiwp0xlrla

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a5caf4503ba137009068d61a0dd8c081_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections