Overview

overview

10

Static

static

10

d085e395b3...18.exe

windows7-x64

10

d085e395b3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d085e395b350b16d7fbf005bfc72aa21_JaffaCakes118

  • Size

    2.2MB

  • MD5

    d085e395b350b16d7fbf005bfc72aa21

  • SHA1

    9d6f893c7f5cc7c02147e189dc42062de926c6eb

  • SHA256

    c7699da0e19e44a96584803d7fe03705bcc080ca0118e6b58f0eee1f90ac8da8

  • SHA512

    4bb0e91eb0038503b08dc46a59ced00db18fe6106edacc5663a94c2b9daa9ae7bcd169e749c62c5523cd9d4fc7a2c0ef794eeef35d7d519c88b65af3ab81acff

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWww2

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d085e395b350b16d7fbf005bfc72aa21_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections