Overview

overview

10

Static

static

10

a9792b0a34...18.exe

windows7-x64

10

a9792b0a34...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9792b0a349ce74f54bd19ba08a0a9f5_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a9792b0a349ce74f54bd19ba08a0a9f5

  • SHA1

    7eed6db2fad4a101a28ab81f3cf4f9636686079c

  • SHA256

    4eb66b3022371b26a842cc8632574927d05577cbd76727de6882a09875242b14

  • SHA512

    0c661f8e9887e1f4e8031b98eccbe753b4dace6c1a0e1f444c2005f5c3a9421020a9be343e0319d9ec21a4adf476243201cccd6b999746ce9a88b7bfcbf5917a

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlq:86SIROiFJiwp0xlrlq

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a9792b0a349ce74f54bd19ba08a0a9f5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections