Overview

overview

10

Static

static

10

a63b832656...18.exe

windows7-x64

10

a63b832656...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a63b83265644ce78aeb3b87af44ad7a7_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a63b83265644ce78aeb3b87af44ad7a7

  • SHA1

    65c9c513ec1b180fb88d7b900f91fa3379dd1b90

  • SHA256

    8761677bc4404575f6cf4c2d78f23c35ed6a50e6a13ade6100db6e90237b74d8

  • SHA512

    3c9a3a7d0c7f49eec7dc0ed81ac9d5c90d73205683fc942fb78462b65c68a48f2ee778a92d7ff9114e8790ef2c604b9ca818db7acba7b4e0c3dbe6102bcdcdbc

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlr:86SIROiFJiwp0xlrlr

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a63b83265644ce78aeb3b87af44ad7a7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections