Overview

overview

10

Static

static

10

b83de770d9...18.exe

windows7-x64

10

b83de770d9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b83de770d923aa1186edafc131987efb_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b83de770d923aa1186edafc131987efb

  • SHA1

    108fbe9dbc22a5f1cc73e9f3820c61d29bead7b5

  • SHA256

    42ed5b17e2740a09a015f02416134cff90851eae82f5cd664037a97f26731d27

  • SHA512

    a227a7f7aed3bdc2d16ddf53861c09ef4166e5b282060301dd4f1e4561521763f5389e4e0e125bdd77c289b8834ca2ef7be4d4618723c2ae480727129042bca3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZT:0UzeyQMS4DqodCnoe+iitjWww/

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b83de770d923aa1186edafc131987efb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections