Overview

overview

10

Static

static

10

a917aa6fdd...18.exe

windows7-x64

10

a917aa6fdd...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a917aa6fdde1d57034ad4a1b5a454ea4_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a917aa6fdde1d57034ad4a1b5a454ea4

  • SHA1

    7bfc0e3ba9267a494f0221869be7ad71d572037d

  • SHA256

    51c8187f3fb8e9ec80a2061904f940558be35b512394da50b33fdf1098292723

  • SHA512

    f47e22e690685a62216d46b689ecd1f77dbc1676bef5a88c718d3ecee3d4828b145fdeaa9b53eba26a9a5fb8e2fac48f98fbeb081b6719093ac5208e21f41d99

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ4:0UzeyQMS4DqodCnoe+iitjWwwc

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a917aa6fdde1d57034ad4a1b5a454ea4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections