Overview

overview

10

Static

static

10

bdaf992f8a...18.exe

windows7-x64

10

bdaf992f8a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bdaf992f8a011ff6a1d9b18908f1e631_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bdaf992f8a011ff6a1d9b18908f1e631

  • SHA1

    662a9eddcebf0f4d85441993c3c8356ad9431cbd

  • SHA256

    b13f90f07ecc212b710b9e5082a2afd7b0e2fbf8b6e4141ed53b6550d5d42af8

  • SHA512

    51c9ba2ad38ec4443a1da5a3685fbd6eac38789caa43d99cfa638fc7b1f488db9e8eea3a7111ba181d6346fcc3ea3a70f61196ea47ffaebe4b1500425a309639

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZo:0UzeyQMS4DqodCnoe+iitjWwwc

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bdaf992f8a011ff6a1d9b18908f1e631_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections