Overview

overview

10

Static

static

10

d0e5881443...18.exe

windows7-x64

10

d0e5881443...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d0e58814435d8e370023012a030edc03_JaffaCakes118

  • Size

    2.6MB

  • MD5

    d0e58814435d8e370023012a030edc03

  • SHA1

    b806b870c252d81ef5d4a8123be733eaf69eebf2

  • SHA256

    96ac71b5498a8946d41c42c4f7d336125c286c3a1d7f5c0503f25b8c0f616733

  • SHA512

    87d6ed05f6793f35a7c2c6ff2c77997b322f3c24035bcd910c8bc619df917d74b35f7076a9d07d1c69ee1f41a2c0088d776b09dd3bb4cba08d7c3203a5cf733e

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlk:86SIROiFJiwp0xlrlk

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0e58814435d8e370023012a030edc03_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections