Overview

overview

10

Static

static

10

d1280378b8...18.exe

windows7-x64

10

d1280378b8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1280378b81be5401b6ca585306281f4_JaffaCakes118

  • Size

    2.2MB

  • MD5

    d1280378b81be5401b6ca585306281f4

  • SHA1

    4d38310b8cb5deb088fe537b2653c85ed715f440

  • SHA256

    5ae06b255adaf1d0a923c0eae83c05429ee59e5155068b971e32e826b3c56416

  • SHA512

    0dfc91849080fa7011b4e042b273d8b10056e87d6ea92782d57c135fb66ab020ce5438e9bebb1cdc4dea0977050b8d52da56748330563296f8178f7313fd484a

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZr:0UzeyQMS4DqodCnoe+iitjWwwP

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d1280378b81be5401b6ca585306281f4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections