Overview

overview

10

Static

static

10

b0804e8c5a...18.exe

windows7-x64

10

b0804e8c5a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0804e8c5a3ec01dee6730c7ac3c6093_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b0804e8c5a3ec01dee6730c7ac3c6093

  • SHA1

    0684c52db0ba861f7b444fe21593a3967ae8a96f

  • SHA256

    cbd387c942fd9622f34329fc62141b97bc97efcf986e83d943255a09e3dca709

  • SHA512

    6b3d0b59ab13236f1282fae12db7787d10b0b219cf26c758d94374f035d7c08bdb72166b85daf038e13ecdcc465538920d07e82b88c3124614ce862fae8a22e6

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrli:86SIROiFJiwp0xlrli

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0804e8c5a3ec01dee6730c7ac3c6093_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections