Overview

overview

10

Static

static

10

af63fdde3d...18.exe

windows7-x64

10

af63fdde3d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    af63fdde3d1c58bee9a37f6d49ef0596_JaffaCakes118

  • Size

    2.6MB

  • MD5

    af63fdde3d1c58bee9a37f6d49ef0596

  • SHA1

    2a36a615707bfb9b712d7c5358208e45fd5e1ec2

  • SHA256

    1ff49f36f587adb572cf0916087b6f3e08a96cf2400b5ff4378494643222316a

  • SHA512

    daa50313242d120f9019d27bb2976ae264db3cf18a40517bd9617d585c296e1d731688efbc3332d8d5135896f4ff00ddc5caecc18ac620dc151867cb5325c7b6

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlW:86SIROiFJiwp0xlrlW

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af63fdde3d1c58bee9a37f6d49ef0596_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections