Overview

overview

10

Static

static

10

d124aa7ae9...18.exe

windows7-x64

10

d124aa7ae9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d124aa7ae9e1004ad9b4fc2513f47763JaffaCakes118

  • Size

    2.6MB

  • MD5

    d124aa7ae9e1004ad9b4fc2513f47763

  • SHA1

    2d50a9151cc39288685855c33551ed536d214a4d

  • SHA256

    0cfac0d81b6b2e85c55ca813959da3727fe7484899ffea5388b2610ea08a7329

  • SHA512

    7f5049a79576ed94e6a461dfff38a1880c89aaa5637affb20d76d798c656e9c36b6b08b910a7205ccc6b1dc0f0becb1a3a5832acfebb7305cf15caeef79e03d0

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrll:86SIROiFJiwp0xlrll

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d124aa7ae9e1004ad9b4fc2513f47763JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections