Overview

overview

10

Static

static

10

c28b3f8abb...18.exe

windows7-x64

10

c28b3f8abb...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c28b3f8abbea5912ed0da5ab1a35d995_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c28b3f8abbea5912ed0da5ab1a35d995

  • SHA1

    dda03860008fe0ff86da460acbf632ad6da73da0

  • SHA256

    9f7838440c5dbba89ceac25fc86dd65d2a6c674738493d2f45e0779165a7ecbe

  • SHA512

    ddb7322c663cdb83f59c4109b974ea576f68ef4d831a189bfa9c9a6d447335d0b13d934b85418d8c7f7b22c411b4e7acbb34e72141517806f3ea098db3969acd

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ7:0UzeyQMS4DqodCnoe+iitjWwwX

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c28b3f8abbea5912ed0da5ab1a35d995_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections