Overview

overview

10

Static

static

10

c100cbab04...18.exe

windows7-x64

10

c100cbab04...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c100cbab04497097e75b4fbc125ea178_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c100cbab04497097e75b4fbc125ea178

  • SHA1

    0c518045aa11ef75464f972cae0acaf084f340c5

  • SHA256

    0599e72886cab831d56711035524b8b4f530c31ae5491cf25ec1014e45ce155e

  • SHA512

    a253a8719ebd9dae309201f003912b04fdfbb2dbe0e6a755c078ee45ba8eb0e2b9c861f7c6671450c46dc2ba9c89f195fe3c15c6b9ce80d9fa62cc9473435ed7

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZN:0UzeyQMS4DqodCnoe+iitjWwwJ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c100cbab04497097e75b4fbc125ea178_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections