Overview

overview

10

Static

static

10

d05d7f8a26...18.exe

windows7-x64

10

d05d7f8a26...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d05d7f8a2642add5748d6f8fbe1a1fbc_JaffaCakes118

  • Size

    2.6MB

  • MD5

    d05d7f8a2642add5748d6f8fbe1a1fbc

  • SHA1

    b13be66a788bad534536e7908bcd434c7d79d45c

  • SHA256

    42e94fd0bdd316d25f7ffd11cbbb969689891702c2f76c65d5a5d1c8b67a23dc

  • SHA512

    1dfdb9c1b451034bc36f33d21cba5602114e4c3ead5c124004274f9e30e7845700625d7cc9ef884a665cf0738f248ba9685bf54428c469234cf4f42c2fd77559

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlW:86SIROiFJiwp0xlrlW

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d05d7f8a2642add5748d6f8fbe1a1fbc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections