Overview

overview

10

Static

static

10

cccdc68a37...18.exe

windows7-x64

10

cccdc68a37...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cccdc68a373e8765104f1db6b4a518b5_JaffaCakes118

  • Size

    2.2MB

  • MD5

    cccdc68a373e8765104f1db6b4a518b5

  • SHA1

    c8a96eb7142efd0506a8eee4616376a95c311da1

  • SHA256

    ea886bbe5e81797dc4c1024b12e8f68da8053a28f98b9a7b82647e2b89ca80ab

  • SHA512

    cbf276a9e3d682ac71fb4b6e96b7b767596279e5c0508d715fa5a5e4663c404aca7a2d462026db6c689fe22e4c1aa20ce3702041ef9a552ef1a553e7ba92bca6

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ5:0UzeyQMS4DqodCnoe+iitjWwwt

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cccdc68a373e8765104f1db6b4a518b5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections