Overview

overview

10

Static

static

10

aa75e905d3...18.exe

windows7-x64

10

aa75e905d3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa75e905d373bdc9d7b66cd0cd870e95_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa75e905d373bdc9d7b66cd0cd870e95

  • SHA1

    0ff909e9676077251421af9538eae73062898ea6

  • SHA256

    4ee9609504f031d5fefc83a19111f7c99726d6983cbda4ed81a7836cdb2eb657

  • SHA512

    9589c26323102e1842dba729c5ac58526ee13ba5c0ff3b6a54fbdb26b21de9700be83f17f610206bfcea35352849c663dcfb09dd2cea798c5ef5436132196eb2

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZK:0UzeyQMS4DqodCnoe+iitjWww+

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa75e905d373bdc9d7b66cd0cd870e95_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections