Overview

overview

10

Static

static

10

b63d4e7676...18.exe

windows7-x64

10

b63d4e7676...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b63d4e767632d05f4e066677bc8747ce_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b63d4e767632d05f4e066677bc8747ce

  • SHA1

    b94890638a736f0cf27bd2d158bb7220da3fbf6b

  • SHA256

    d8e656cc2faf7ca906017dabae0aaf7c853092a43bcc184ddc69618a8d722815

  • SHA512

    f19929fd77526fba2d40c8563ca34e09ea239b70d0593ba5cc676c3f0bb6f4d716daac09af2e64435e649b34e1c45a8dabb6da9cb81d6fe6ca33abccb907b086

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZr:0UzeyQMS4DqodCnoe+iitjWwwv

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b63d4e767632d05f4e066677bc8747ce_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections