Overview

overview

10

Static

static

10

ac3379e967...18.exe

windows7-x64

10

ac3379e967...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ac3379e9674241db6e7b3022fee3d0e0_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ac3379e9674241db6e7b3022fee3d0e0

  • SHA1

    64deebcd6c8f336fc4f581ae8c94e6162545df5e

  • SHA256

    6cef8e1084774672dfe95d4db12c201804337f2d388f0a3cf27918d200cec662

  • SHA512

    7e51fb574774fa18e00cf6f3c1175edd1e27ce3dfddd8d16bb0c19bb1c6e2c62c7012fb2d911ba2a609e886ca4c2a85b747d47286e1f301a6e3f0c14eb1fbcf6

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWwwO

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac3379e9674241db6e7b3022fee3d0e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections