Overview

overview

10

Static

static

10

a975016648...18.exe

windows7-x64

10

a975016648...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a97501664811c7dfecd1e97fd5972a66_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a97501664811c7dfecd1e97fd5972a66

  • SHA1

    f0f07c5cf46e1a8a7846816f929b01cd183d6dd9

  • SHA256

    362faf96d7a7f724afef50431968dab9a70df80624a0ec5805f4912c1f1a9059

  • SHA512

    42ac15df86ff83f6634ce9f4ac80e4ff562c2233a9b8ca0883bc35815444e9f7dd35b3c4c5d21bf9a4b9176733ead6d109d7f2e172ef38f7208c24b2d6cbba11

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlK:86SIROiFJiwp0xlrlK

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a97501664811c7dfecd1e97fd5972a66_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections