Overview

overview

10

Static

static

10

b1a979609e...18.exe

windows7-x64

10

b1a979609e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1a979609ea1329c3ccf29a56f8cf208_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b1a979609ea1329c3ccf29a56f8cf208

  • SHA1

    3c0041a76ba895b666732cd35663fa8db2a9e46d

  • SHA256

    9de7613e42b1eea24c7d856be61eb49d9b355c699ef846d89ca59c7ba39e3fbd

  • SHA512

    bb8a03761a4b3225b34806b6a61c7e5205266ca56d39a1fc9afdfa2aad7c5950689240c4b18cfefe617fea2da4c4f28ccacce3a65185f1b7c98bb200ca6eaa57

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlu:86SIROiFJiwp0xlrlu

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b1a979609ea1329c3ccf29a56f8cf208_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections