Overview

overview

10

Static

static

10

d175601b06...18.exe

windows7-x64

10

d175601b06...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d175601b063f65be97a0e1532de496d2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    d175601b063f65be97a0e1532de496d2

  • SHA1

    2281b815e520354b88eea24de87e17128615b507

  • SHA256

    5fa930a6d89cf403a5bf09a789cd03c92bea98edf171b255d188401de1a3aea3

  • SHA512

    3ddf5a39b75fdbb0015f65b916778a1d83f982026dd86e0ef0fa4ca420e914acac790a033286857ea9f8e6c24d64d04c63feb6cea22f40d1503c1fa26a3a4638

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ9:0UzeyQMS4DqodCnoe+iitjWwwJ

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d175601b063f65be97a0e1532de496d2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections