Overview

overview

10

Static

static

10

ae6fc9a8d1...18.exe

windows7-x64

10

ae6fc9a8d1...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ae6fc9a8d158fa307078ba02131d063e_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ae6fc9a8d158fa307078ba02131d063e

  • SHA1

    a3e8a3fad071075abdf64e2cdc4e5e2f7ce5e534

  • SHA256

    931fae78a1e4d6507c94f6d60572d36cdb41021b3ddcdc35775a1d634ac7d988

  • SHA512

    b9aa980f9cb13c628655dab998420a3519efe588006cc392402d65812f398cdebc9497bd6e654fb641c96aa2fe533ceee33179eb3171ab1d8e3bb398d801437e

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlS:86SIROiFJiwp0xlrlS

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae6fc9a8d158fa307078ba02131d063e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections