Overview

overview

10

Static

static

10

be378b65a1...18.exe

windows7-x64

10

be378b65a1...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    be378b65a1c3a9c0d7db2beceed05446_JaffaCakes118

  • Size

    2.2MB

  • MD5

    be378b65a1c3a9c0d7db2beceed05446

  • SHA1

    ea3c8dd25eb961b4cee48c4f10e93af56679ef85

  • SHA256

    7dab3c86da29e96c095d3eb63e2480f7da121d6b779e98fb91a53c2a70871389

  • SHA512

    0843e329ff8e2b65655457a6c9af086e647960356f863c1c741b4c8c7460f6d01714421863e263b59094e54901bd0a067ce1a4e8a500d33c2f6ed66e47441321

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ3:0UzeyQMS4DqodCnoe+iitjWwwb

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be378b65a1c3a9c0d7db2beceed05446_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections