Overview

overview

10

Static

static

10

b4813597a5...18.exe

windows7-x64

10

b4813597a5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4813597a5edf1bbafc75b5e47229790_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b4813597a5edf1bbafc75b5e47229790

  • SHA1

    48bb315d151641e888988aeb9fca545907fdff34

  • SHA256

    1399e3c37347211a60845e8594ead328b4a8294eda9aef5c0df586f5fc8b2fce

  • SHA512

    c94899be2f23749c596bd247826f283d556afdf1bd46c30d88ac0b2bc83f3efea53d1653ba8b001b5e2c79d8ac3d792ad5f53673eb66654a73f923fb6a0b5313

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ9:0UzeyQMS4DqodCnoe+iitjWwwJ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b4813597a5edf1bbafc75b5e47229790_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections