Overview

overview

10

Static

static

10

ac066a4217...18.exe

windows7-x64

10

ac066a4217...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ac066a4217d58114a401eb932af26535_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ac066a4217d58114a401eb932af26535

  • SHA1

    033322d9ec8b6573c0a293d992e9f1734bdef0a9

  • SHA256

    83f0a6c41a18042fd8c3b5b24e9948727b2df31288ae83e8ea32003af8ad567f

  • SHA512

    3991eb1f8e9fa4476b5c8368cf1b388e1713d759d20736891d241a6b25158349200030ed7f6012d7ccea3956a594f5560fc253c8719d30391325a017eef85e6c

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlf:86SIROiFJiwp0xlrlf

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac066a4217d58114a401eb932af26535_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections