Overview

overview

10

Static

static

10

b0f766e6ca...18.exe

windows7-x64

10

b0f766e6ca...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0f766e6ca457e0d4cdde28ba0701382_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b0f766e6ca457e0d4cdde28ba0701382

  • SHA1

    832d4019a41d98a56abeaf43ab2fb52f6ba34ed0

  • SHA256

    fcf6c1c3d7b7a14d5ca48810ce80f800bd7fad5ae999f2148774b4a1f5ecb7d5

  • SHA512

    92c5893ba824358e65ab95a9f5b9c0bb0ebf03364742f7393b2af6a4138a5a600af9aed62476ab52620a45491c584a257f0cd9cf5b37dcebdad17ea8d9ae646f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZR:0UzeyQMS4DqodCnoe+iitjWww1

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0f766e6ca457e0d4cdde28ba0701382_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections