Overview

overview

10

Static

static

10

a780a92e0f...18.exe

windows7-x64

10

a780a92e0f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a780a92e0f8dad65de24d8ca8e1718de_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a780a92e0f8dad65de24d8ca8e1718de

  • SHA1

    e37ddc330c638c11a947dc5ab55d4682d57cbf48

  • SHA256

    397e34996008f45b1dff9ee90ef44937b8e3b7485e4eec050ef924525540a3e6

  • SHA512

    954c2da5f4a9a582d6573c67954766713d43ffe9111cfa7b0f563d4d17106101d87b77eb5c13d4f8991868f159afa53cc4256302ae17b2abfdd131d805e121a9

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlH:86SIROiFJiwp0xlrlH

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a780a92e0f8dad65de24d8ca8e1718de_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections