Overview

overview

10

Static

static

10

aaa281d629...18.exe

windows7-x64

10

aaa281d629...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aaa281d629b4976ef080270c9005e96a_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aaa281d629b4976ef080270c9005e96a

  • SHA1

    f7b246253fa1ad225f0da2384731b1a7efae70e0

  • SHA256

    72e5b4057c325da824f50bc58b43e9b386dac659de0540291fbff3cfe4b15027

  • SHA512

    00acbb5aa9e6b3002f153be9c4955c950e5ebc138cdf1152e43c9aa995e34055c8f5cf685b432607c0704271486bfd62181a7fe97438103b23c2fcaa463bb3c1

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZT:0UzeyQMS4DqodCnoe+iitjWwwH

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aaa281d629b4976ef080270c9005e96a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections