Overview

overview

10

Static

static

10

bde5ff3706...18.exe

windows7-x64

10

bde5ff3706...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bde5ff37068bdae080728d4e28c63bc0_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bde5ff37068bdae080728d4e28c63bc0

  • SHA1

    e697b730d22e17893b13f8ed0b96adf18afc133d

  • SHA256

    5e8db524c057d2bdd4dc161365e02dc8a12b66959b263f770b135e9ffe7e4f61

  • SHA512

    066f7a6a30a45b5bc2154b373a1025614ba79cd8afc6034f008ce773ac93b96a9e4ec1f1def41a3eca65d9f794d92fe9c09bbe5ad2e14d4d43a65ca5ab419b9f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZf:0UzeyQMS4DqodCnoe+iitjWwwz

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bde5ff37068bdae080728d4e28c63bc0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections