Overview

overview

10

Static

static

10

c166f5ad08...18.exe

windows7-x64

10

c166f5ad08...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c166f5ad08c6c25fad0fba6b90305ec6_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c166f5ad08c6c25fad0fba6b90305ec6

  • SHA1

    b41007ad10fd4965a1f8d9e29255b7d52060b2ac

  • SHA256

    a289d9f32f7fb46de9287d8bc6d98d4daf394361b398b46f426b20b78b877b0b

  • SHA512

    9ebfc9e2506cb28c9adbcc8275742262b2aac752382cf02f53c5178a0cd1c31401ae7df24c1ef30de56f280103f22ae29bfa70366c30dbefe55a4f7db41b5c73

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZk:0UzeyQMS4DqodCnoe+iitjWww4

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c166f5ad08c6c25fad0fba6b90305ec6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections