Overview

overview

10

Static

static

10

aa87783d05...18.exe

windows7-x64

10

aa87783d05...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa87783d05bd324cda4166b79841d09b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    aa87783d05bd324cda4166b79841d09b

  • SHA1

    8c6174ded660d83fbc1cf4d3b4617826895c026c

  • SHA256

    b20f2d88760da24decb46969ff34b79f16712da8617cca732a79205dc05b3ae0

  • SHA512

    390a61ba7da4ebe0a5429e93dc94b61fdb3969fb3f10b53065ba6b60cde8a2d372f0b29333c3522a55730fe40fe02da1ab962013c733e5a1786958e91f515caa

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlz:86SIROiFJiwp0xlrlz

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa87783d05bd324cda4166b79841d09b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections