Overview

overview

10

Static

static

10

aa6fce3d67...18.exe

windows7-x64

10

aa6fce3d67...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa6fce3d670ff95938442e7d2a7cf6d4_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa6fce3d670ff95938442e7d2a7cf6d4

  • SHA1

    96f0d7733e2ddf7ac6f3058c726e97b3f995e482

  • SHA256

    877593f530db00f302cf854662008c86a8eae3aeb947b626d1aa12df1e490666

  • SHA512

    a144b27a51c7b87434cae08277248c71de6373c5344c06b30f5c88b2f48e037b1809453f8a3c1c9838459f3f2e745a918794c4def62aa3fef7395fdacf401244

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ8:0UzeyQMS4DqodCnoe+iitjWww4

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa6fce3d670ff95938442e7d2a7cf6d4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections