Overview

overview

10

Static

static

10

af78ba657e...18.exe

windows7-x64

10

af78ba657e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    af78ba657e0a31e27c6629bb48575304_JaffaCakes118

  • Size

    2.6MB

  • MD5

    af78ba657e0a31e27c6629bb48575304

  • SHA1

    82d261eda23842369d23c4e0b4a4bc5034d34e25

  • SHA256

    afd2ccca9359f665fdf72be376fc5213e7c0a02d02aea38af0e3e9d6179dd36c

  • SHA512

    555da56281cce137028f6dbfab9ff923f46eb124059a2d6171ac8c529c5025aede3bfb39615b94ba969250ebc2016882d818c7b16661d20096430ca54ce18209

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlF:86SIROiFJiwp0xlrlF

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af78ba657e0a31e27c6629bb48575304_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections