Overview

overview

10

Static

static

10

bd94774a0f...18.exe

windows7-x64

10

bd94774a0f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd94774a0fb3c16437d517ceb53f6366_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bd94774a0fb3c16437d517ceb53f6366

  • SHA1

    07d0cd6cbd657900bd2d2348bdea79ff5f0294e8

  • SHA256

    b797bbd91e7b362b1ed7300d0fa7b8cd66af02bd77e58aa93207871a5fe5f75e

  • SHA512

    45949a6c031bbc2af9a0ff64ee233ac19842d9060af5e3847a5bffabde1385406862b494bbb9fcc742b927ae868aac78bd790653bb86121b4f9618407632ac1e

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWwwm

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bd94774a0fb3c16437d517ceb53f6366_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections