Overview

overview

10

Static

static

10

ade1399b97...18.exe

windows7-x64

10

ade1399b97...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ade1399b97a564f9c0eefe9ff1a08743_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ade1399b97a564f9c0eefe9ff1a08743

  • SHA1

    80691ae56e11455382609ae9d050ab569487fe98

  • SHA256

    097b18e711c88b361fb57d3b92a9b42418db0da1662735eaa2b6edd551032d13

  • SHA512

    3b72cc328dceef295e1e29ea87ea6cf4c4836420facc08d96253f54e9e23f7edf308fded4b6afd18f7b3e7090bc0b11cee25c76091878303ba6afb6cd95b82b3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ9:0UzeyQMS4DqodCnoe+iitjWwwZ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ade1399b97a564f9c0eefe9ff1a08743_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections