Overview

overview

10

Static

static

10

ad9923e1db...18.exe

windows7-x64

10

ad9923e1db...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad9923e1dbf4ecb66d2426dfa1264620_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ad9923e1dbf4ecb66d2426dfa1264620

  • SHA1

    c3d1db8d9a1d512be4a89310fa39933ad40f66c0

  • SHA256

    5021d49dc9daceb9066bed1ddd9ce000a60b5dd2bec83ccd9aa8716f67178f0e

  • SHA512

    71a30e1fb0dbbd202d15757e60c4b3aaa7fbd3b52f2602e10d32be9cfb228f7d4167b572c570f986c403390ebb23cd2db916b72e86af0b2c4f8c9497e04a13df

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ9:0UzeyQMS4DqodCnoe+iitjWwwZ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad9923e1dbf4ecb66d2426dfa1264620_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections