Overview

overview

10

Static

static

10

a623e2a5a1...18.exe

windows7-x64

10

a623e2a5a1...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a623e2a5a1424e6190d25143125a9c81_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a623e2a5a1424e6190d25143125a9c81

  • SHA1

    8c000933c2185b24624c05796f596bb8e99cf7e6

  • SHA256

    fc109dbfbc77b73c2a9747716afee68b511c6ddd6d70612b555f536f64ded209

  • SHA512

    05fe6a5f09912fc97ded8bdc4149eaa057db4abb9399bfd783b7f3c41adc2f0f6f7c26a3a4ed3e334f374c1fd8f5795071f2b38e898d62dc1bb174a19d61d22d

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZN:0UzeyQMS4DqodCnoe+iitjWwwx

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a623e2a5a1424e6190d25143125a9c81_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections