Overview

overview

10

Static

static

10

c86a486a36...18.exe

windows7-x64

10

c86a486a36...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c86a486a36cf4adbb75b89992f5faf45_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c86a486a36cf4adbb75b89992f5faf45

  • SHA1

    804e1e287da7cf178f9a47f47364c6e575cc56eb

  • SHA256

    d9fc8fa35b946a873703cf34fb64d710649d0d45c07e8a4146175adf0e2e8087

  • SHA512

    309878e7b24c2c6319a24286a33d64b9851df4d17691209d0d788fca3b6f793ca966496798aad449a5819a0bcbfbea8b3a4dfe3d6dae5cadd9fc22de599011b7

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZJ:0UzeyQMS4DqodCnoe+iitjWwwd

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c86a486a36cf4adbb75b89992f5faf45_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections