Overview

overview

10

Static

static

10

b27e002a16...18.exe

windows7-x64

10

b27e002a16...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b27e002a161df639d91958e1a0c8f77e_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b27e002a161df639d91958e1a0c8f77e

  • SHA1

    60785bbec8b29e4091f2cb792badf827ef4a14c7

  • SHA256

    e1438e2d5f49e4d916d7ea54eaf51f6cf0f5b33205b60e18997ed5c59465eade

  • SHA512

    a2e6db1f01c27fbacf718247ab7d66f9554d31e7e8160dbe86309e4be5af799e49b5ed27febce1ec5c7fe7036c243bfd9de05b2f7a18f35a30b9a157296832f7

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZR:0UzeyQMS4DqodCnoe+iitjWwwV

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b27e002a161df639d91958e1a0c8f77e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections