Overview

overview

10

Static

static

10

b737a3a1c2...18.exe

windows7-x64

10

b737a3a1c2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b737a3a1c2fcbd7f7adb33d59390baf7_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b737a3a1c2fcbd7f7adb33d59390baf7

  • SHA1

    34fa5208d0f0eb22eca2fe4b9ad52fee24975034

  • SHA256

    d916a3a401e76fdcf84767728f6647e060a96f8c12ac0c981383eb6999bc42a5

  • SHA512

    d697a47c08c7c469f7228e88a634ae0b96de4828e3a2b98bbbac46ccd6855f608c2fc6b7fa7609f42eefcc35de49bb245b10953922973c82b94cc49637488c9b

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZF:0UzeyQMS4DqodCnoe+iitjWwwJ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b737a3a1c2fcbd7f7adb33d59390baf7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections