Overview

overview

10

Static

static

10

b768b6d702...18.exe

windows7-x64

10

b768b6d702...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b768b6d70275569820d9857aa8c908f5_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b768b6d70275569820d9857aa8c908f5

  • SHA1

    f11fc180202e343b2630393cb1064c636bd28b3c

  • SHA256

    718a1334d67c4d7b928ce8b99eeaf766a6131461d0e20641d6b3412aeb219b05

  • SHA512

    ed0dd1b11d4529913a81c63b396a9e07aa7aac2b122e65c31408111a2473bd443734f0a964b1b97618381086d644e8a6b5c193cd9445e65bc14e67dbe1a4008d

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ+:0UzeyQMS4DqodCnoe+iitjWwwq

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b768b6d70275569820d9857aa8c908f5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections