Overview

overview

10

Static

static

10

b598402eb4...18.exe

windows7-x64

10

b598402eb4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b598402eb44cabbc9fd725ab2158c382_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b598402eb44cabbc9fd725ab2158c382

  • SHA1

    67d762a742fab8512c34406c0c87ea6a516fe36b

  • SHA256

    667079d25cf82d4dfd7c2a3af24c8332c08a959919e5669ae66654ca8ccd6c1c

  • SHA512

    1db9e5e713759b7f1709517c5eb5a7c29562c42566a5dbd2b3f95f6ecc06a58c6dd83f92fa7d4bcb6ec9fef597059d414093124add91dd4c001eac69ca5400b2

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZE:0UzeyQMS4DqodCnoe+iitjWwwg

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b598402eb44cabbc9fd725ab2158c382_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections