Overview

overview

10

Static

static

10

cfd52ba695...18.exe

windows7-x64

10

cfd52ba695...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cfd52ba695418024e5b2512d019d6c95_JaffaCakes118

  • Size

    2.2MB

  • MD5

    cfd52ba695418024e5b2512d019d6c95

  • SHA1

    fcce58e7c5f73f187ef755eadff0c6ed0237bc34

  • SHA256

    c96914a3e8a69c59786312b38ee16a027df5a8d3354a2ecac85b068ee9ee891d

  • SHA512

    c697785b2d32542d2e2dfd49d3c2fab9f1855b89a069fab216dfa1050f3a9485c5d17694995c26e4c6de7d9073610d5199c9e34eeefeb945a48f61addab60767

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ2:0UzeyQMS4DqodCnoe+iitjWww6

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cfd52ba695418024e5b2512d019d6c95_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections