Overview

overview

10

Static

static

10

bd9e7e18c0...18.exe

windows7-x64

10

bd9e7e18c0...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bd9e7e18c053599ce116883669be85ca_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bd9e7e18c053599ce116883669be85ca

  • SHA1

    ecbaf8cc4833a22ebf3ec2ea66ee48a65b22329c

  • SHA256

    da04b8878dd2ef78d6e5d5dd0cbdabc0f3554d73b43f8f3edc856fbc017df639

  • SHA512

    6550e8e21795dad25e3ef6aed6bd14c404fac64211a5351090d98fa05b4691c195e2e8878543adb0c34914d1a69dee1defab7dfbeb4af4d0c636eb4052c5d00f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZp:0UzeyQMS4DqodCnoe+iitjWww1

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bd9e7e18c053599ce116883669be85ca_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections