Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

cf9a2f1f9a...18.exe

windows7-x64

10

cf9a2f1f9a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf9a2f1f9abf6547db6bebc63ec86226_JaffaCakes118

  • Size

    2.2MB

  • MD5

    cf9a2f1f9abf6547db6bebc63ec86226

  • SHA1

    7dc3fde8e3e807ab20a53f07e0ecdcfe90ca4a4f

  • SHA256

    2a18231ebd1529b5c85c19c813cfcff5519b7c84acf00f261185607891871252

  • SHA512

    91fef046adb8b1edb57b4f395c9c2131f32665bc77b3f59d464c571d27b11dda6f2baa9d1a6e6a47b61f775d3d9667424082beb76f2b47e4df16dc2bd4ff8f75

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZN:0UzeyQMS4DqodCnoe+iitjWwwx

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cf9a2f1f9abf6547db6bebc63ec86226_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.