Overview

overview

10

Static

static

10

b322a09ba3...18.exe

windows7-x64

10

b322a09ba3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b322a09ba38922ca0adbc0127d7e9b07_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b322a09ba38922ca0adbc0127d7e9b07

  • SHA1

    67538d032f7e5105b35b6943e29e9a03db2ad471

  • SHA256

    9de93560a148694151d56fab5a3b261e0eb0250b3910ffbabac9948c4976b131

  • SHA512

    c942dda5fbd846bf29f1ad03175d8cbb2fe6afc01ac2a06a024f40b3ff5fcfaa34be10309914130c6535d12775e22c5c3cbede9b58599a6d150e147f28580f69

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZc:0UzeyQMS4DqodCnoe+iitjWww4

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b322a09ba38922ca0adbc0127d7e9b07_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections