Overview

overview

10

Static

static

10

a618b4ed1b...18.exe

windows7-x64

10

a618b4ed1b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a618b4ed1bbc1139ecf78fee0cd31732_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a618b4ed1bbc1139ecf78fee0cd31732

  • SHA1

    372604cb8fc0e6d0b70fbe91541df4ec15582acf

  • SHA256

    bb68015458b8e82bff92ce1b944decadbd6f8975cb7815a68afa5f71e077ef5a

  • SHA512

    07731dcc499ce6e7e92c3aaaf5e5455727a15bf2345a3d661eab1dcb4368a2eb2ae05949acf95c5bd88fab275fe1eae69b2540056fff25e2a9d1f0c89181f150

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlU:86SIROiFJiwp0xlrlU

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a618b4ed1bbc1139ecf78fee0cd31732_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections