Overview

overview

10

Static

static

10

bf6920e160...18.exe

windows7-x64

10

bf6920e160...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf6920e16085782510fb47755aa117cb_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bf6920e16085782510fb47755aa117cb

  • SHA1

    b004823d8dab730d04f8ae89bfd843a18254671c

  • SHA256

    58c07dfeec288b56cd1bfc9ad79bed183558b86c93af38462a01f010ce940640

  • SHA512

    ad8f02d9f187eb5af7f5683ee63794ce89bbacedf4b6600a4a933fa9105a0919d3afca58e8dc56ff63ab0de050f6a3739ff606afa910e8340bb93ef7230b6a9f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZc:0UzeyQMS4DqodCnoe+iitjWwwg

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bf6920e16085782510fb47755aa117cb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections