Overview

overview

10

Static

static

10

b56f37a0c7...18.exe

windows7-x64

10

b56f37a0c7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b56f37a0c7a329ce0d41974610792917_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b56f37a0c7a329ce0d41974610792917

  • SHA1

    1fe7c1017acb02bb2b84f22e842ebcaf57a18d94

  • SHA256

    4ffb78d426b7149fade14bcf2169d0c40e87fe4496e01ea12709e6a375b8272f

  • SHA512

    bc8aff76e331fd678de3a20480427da2df9326fcbc8123b0f6bfd63a6977a13743deedb4f013f11035e7c8f0268c99b24213c708976e7eda2b2ec9d5f2c5945d

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZe:0UzeyQMS4DqodCnoe+iitjWww6

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b56f37a0c7a329ce0d41974610792917_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections