Overview

overview

10

Static

static

10

ae6a794e05...18.exe

windows7-x64

10

ae6a794e05...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ae6a794e058f0e9832b0580c94f7de14_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ae6a794e058f0e9832b0580c94f7de14

  • SHA1

    58dcc8e1814bfba44bd7cdb0ff7788b1fdf15e83

  • SHA256

    f91d518f413fc5237412b0d2c8244b210ecadfb17dce8461553502d39a137d2f

  • SHA512

    d49df5fb35a199ef3902218eb629d866314be990ee8346bb02f19be8dfb60830a5721adca6d255e9cb12244e78b70143e558f464a0347c0e543585717cbcf9f5

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZY:0UzeyQMS4DqodCnoe+iitjWwwc

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae6a794e058f0e9832b0580c94f7de14_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections