Overview

overview

10

Static

static

10

aa18379fcb...18.exe

windows7-x64

10

aa18379fcb...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa18379fcbb96a8468bb4e14432933fd_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa18379fcbb96a8468bb4e14432933fd

  • SHA1

    a38ad075f3168109a2a43db9cd3d2faf47c6eb7e

  • SHA256

    26ef99899c87bebf912b20cdddf07986a2384a0e9f30b4b7f09c2705baf869e4

  • SHA512

    9e574be627a739b9f8037b7e06bdf85d882918307961c88f5f002439b27e51ae248e93ff08414b5638e711578310a0936a48752ed7b8ce5b6973c2ec8c226558

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZC:0UzeyQMS4DqodCnoe+iitjWwwO

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa18379fcbb96a8468bb4e14432933fd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections