Overview

overview

10

Static

static

10

a67a5dcb9a...18.exe

windows7-x64

10

a67a5dcb9a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a67a5dcb9a2d130469d657c111d17ef5_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a67a5dcb9a2d130469d657c111d17ef5

  • SHA1

    f0be026fc45130b5e691d9ff8601535d150afc3a

  • SHA256

    3542c47d5ded3f28da1a39e744cd2a3a24141dd45515d7416f58e10a473415d0

  • SHA512

    a1acb0053db6fe858ea1f9374da040fd658bb6e9c96c46071fe19226107a8036e4a72da32aaf6ef8612cb2192b5e3238a1a45cbc799014afaab8a7d712e18cfc

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZo:0UzeyQMS4DqodCnoe+iitjWww8

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a67a5dcb9a2d130469d657c111d17ef5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections