Overview

overview

10

Static

static

10

bd786dde16...18.exe

windows7-x64

10

bd786dde16...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd786dde168a876d3cd1be5f20945403_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bd786dde168a876d3cd1be5f20945403

  • SHA1

    390ca65c70d74a7fc3a46d5467d9700cbafe8609

  • SHA256

    ba40a7558cdcafb64c7ae91dde687c5e8b03b756528b5bb9f2b8e332cbfa6f7e

  • SHA512

    f5d326e134ad44c62568979f7dc967d2ddbea47ee87312080d71caa0dcf4f98c08fd2cc800c7017367e5f41d17e43f854f72c1eb0d10fec9735a634bf20d5fc6

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ+:0UzeyQMS4DqodCnoe+iitjWwwC

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bd786dde168a876d3cd1be5f20945403_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections