Overview

overview

10

Static

static

10

c169d2cfea...18.exe

windows7-x64

10

c169d2cfea...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c169d2cfea7d22aa8bebae6c47eaf842_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c169d2cfea7d22aa8bebae6c47eaf842

  • SHA1

    3032535f8664c0acf0da97dd55033c1cba08691c

  • SHA256

    fadfe3fc6aee0b2b79bbb2eea277afd63d45229c662f0e6fa6406a3988165786

  • SHA512

    5d84f6a0e8189dbef11eb6c561813ec110f70d833def92fecba72334901ab7357cde1d44d8c1a0f5bb65fbd65ac113cbf346a697eb202d1b2f60b5033e33cffc

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWwwu

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c169d2cfea7d22aa8bebae6c47eaf842_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections