Overview

overview

10

Static

static

10

afb408c688...18.exe

windows7-x64

10

afb408c688...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    afb408c688dc949b809e2f088947c22f_JaffaCakes118

  • Size

    2.6MB

  • MD5

    afb408c688dc949b809e2f088947c22f

  • SHA1

    a4e2f6db5a1e78a84b5e30fdf80323c8f7fc3220

  • SHA256

    7d2d2d95c6815aeab22ea1074f75fbdcc9ce663078abddebc80a17d13d1ca357

  • SHA512

    ff334ab2caebfdc3431ad74aef995db1d4dd27d31769ee88e1c666b25b278c1276f9f3c9ed32d7fbc3649230d687e4b285346c0aaf39a4d102bd9d42be5aceab

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlr:86SIROiFJiwp0xlrlr

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • afb408c688dc949b809e2f088947c22f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections