Overview

overview

10

Static

static

10

c1676d9309...18.exe

windows7-x64

10

c1676d9309...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c1676d93094b6d22d4038334f2e26d9e_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c1676d93094b6d22d4038334f2e26d9e

  • SHA1

    e8a0249a3902753138db1efcce7f82f6bbe15548

  • SHA256

    f4ef2d77d9e68c4e045d272e7b98b0461e8a77ae1c7d5b718e449492f78e305e

  • SHA512

    77b021d64bf13e5f6c062bcaa7c6b9923326edf564ba675be8aa364b1fe9280b879022b71f128c6be4005b796b2b3d0639428a342ddb819745bcfb79e7236164

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ7:0UzeyQMS4DqodCnoe+iitjWwwP

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c1676d93094b6d22d4038334f2e26d9e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections