Overview

overview

10

Static

static

10

ae5ea9a5f9...18.exe

windows7-x64

10

ae5ea9a5f9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ae5ea9a5f91d10456d19ddd1d1285ab8_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ae5ea9a5f91d10456d19ddd1d1285ab8

  • SHA1

    966cf2c3a09ce1e3fc9783324d171ac9a6a240be

  • SHA256

    864afca3e3a47123244df3d245600afae7389d0333734bf545e532496feb7fda

  • SHA512

    78fc7a9b569014094e30b2f7a745b51f24f1d65342d09c20d61d41548b01f926afe15ea1f38f52da29568789e64022924a5e2c3c612bd95f72b86c31aabbbc5d

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZN:0UzeyQMS4DqodCnoe+iitjWwwh

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae5ea9a5f91d10456d19ddd1d1285ab8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections