Overview

overview

10

Static

static

10

b68f25c5bf...18.exe

windows7-x64

10

b68f25c5bf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b68f25c5bfa172f4d430b727066770b4_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b68f25c5bfa172f4d430b727066770b4

  • SHA1

    d5f6e629730da70051a7f45cd2afb5d4ed8a3c63

  • SHA256

    5fd29d96d1a9ba6c2ca44a6d79ae3180f232ad080c034acf8300b7c24475af30

  • SHA512

    c0a59208c3617d2ae86c211aaf05a3689844a68056a01f3014aa99f69ad8e365329131f46ed3203f8d71e469c8204edb2f848375fece75b910056871fbb0673c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZK:0UzeyQMS4DqodCnoe+iitjWwwG

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b68f25c5bfa172f4d430b727066770b4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections