Overview

overview

10

Static

static

10

aa9025bf3a...18.exe

windows7-x64

10

aa9025bf3a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa9025bf3a9e0b1d9fdfc024b71ca972_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa9025bf3a9e0b1d9fdfc024b71ca972

  • SHA1

    771f2c1a9b0a3a690bfbff7ffb8ab51d2f9543e4

  • SHA256

    3ce4eb875e39c141aab3e546ce711d43828a835144f38c72b5e4d72abfe4c63d

  • SHA512

    b7ddf909e80e1b76206f17a2949afda75bedc90a20ae7158ef98a30d186091111d4d52f942fde70c4c6c74bf43e65cb70887a70d544130a8fe3d4d09efd05b3b

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZU:0UzeyQMS4DqodCnoe+iitjWwwg

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa9025bf3a9e0b1d9fdfc024b71ca972_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections