Overview

overview

10

Static

static

10

ae87bdf442...18.exe

windows7-x64

10

ae87bdf442...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ae87bdf442b922e86d61213a966dd832_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ae87bdf442b922e86d61213a966dd832

  • SHA1

    772debe83705141ef2392c65632dc80728ad49fc

  • SHA256

    c804b05b61c61654c4336586f6adb1c7d7949e1c55b01aeeaf1055ed5c606b60

  • SHA512

    1193f20f721db6aab0561e35b47e443037a8be0e1da382b6333d439ce6dd4f0ecee1434bb372663d57da516b7ee28459a23c9f8e8715d7ce495c070349393103

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ9:0UzeyQMS4DqodCnoe+iitjWwwZ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae87bdf442b922e86d61213a966dd832_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections