Overview

overview

10

Static

static

10

aa880523ab...18.exe

windows7-x64

10

aa880523ab...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa880523ab88ad14444afd1674ee3835_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa880523ab88ad14444afd1674ee3835

  • SHA1

    0558e5674361c70f88d3889aaf5906b391fb15fa

  • SHA256

    6fa00f8f4537836b8dcc8c4e4bc463242b7ad6136cdf39d1650a1bf71dbb750b

  • SHA512

    72da641f3d1126585bdfbb8710abb55f5b3523883689895f7330a5e2e0bd2167887164cf9d0d040fc83e0b595bb274c0085ed859dba4516d5d17602b42af8253

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ4:0UzeyQMS4DqodCnoe+iitjWwwU

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa880523ab88ad14444afd1674ee3835_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections