Overview

overview

10

Static

static

10

a73e9bdfae...18.exe

windows7-x64

10

a73e9bdfae...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a73e9bdfae227af598aa9613232fdbb1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a73e9bdfae227af598aa9613232fdbb1

  • SHA1

    d2bfe51c069d609de2f1f80ce9edc1204a1b9339

  • SHA256

    ff4bc2fe75541db8a3953be9eeed18ab9e72710fe8ecff4687ffc307ff5c6e51

  • SHA512

    315bf17d6e9c94a54aa139d4228a9fae1c19600859ebf223cae03d8a23d46f91b812948016b3b93df88c056fe0ed134a720346372c6203b29575543ce47143bd

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZV:0UzeyQMS4DqodCnoe+iitjWwwZ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a73e9bdfae227af598aa9613232fdbb1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections