Overview

overview

10

Static

static

10

b63b35f48e...18.exe

windows7-x64

10

b63b35f48e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b63b35f48e6a08544f85b20d4f584943_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b63b35f48e6a08544f85b20d4f584943

  • SHA1

    8ebb9708a7f3b4f38cbe579f75d3dea547dce802

  • SHA256

    0c444892923b9e794a76408d08b59bf6083f6f054db97539dc66a4f81c8d7c6e

  • SHA512

    97734b191c36f1693e50c3ab186d5b13368b7689678a4088989a23de7f8b584610dfe612e650049ddf65046ddfb9380b201c68c24bc1512685c895a1ea3d7008

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ7:0UzeyQMS4DqodCnoe+iitjWwwf

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b63b35f48e6a08544f85b20d4f584943_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections