Overview

overview

10

Static

static

10

c12a8f1e2e...18.exe

windows7-x64

10

c12a8f1e2e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c12a8f1e2e3e09889e13d6800faf713b_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c12a8f1e2e3e09889e13d6800faf713b

  • SHA1

    c1a5decaa1e784c45035b6946702528402fa6d7d

  • SHA256

    586bd9d40d512836939b36f17d9021ac1130efc2ddd9138be0d34d9cfaf0c3cf

  • SHA512

    25d46263166984fe76d4720b425136ea426b6134ec1ae52b42835e48dc9ca2fbe66550972e13ff8888d6d8c07cf77f4819a0a160cf849524d75c42decec702ed

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZn:0UzeyQMS4DqodCnoe+iitjWwwj

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c12a8f1e2e3e09889e13d6800faf713b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections