Overview

overview

10

Static

static

10

d6949a5c77...18.exe

windows7-x64

10

d6949a5c77...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6949a5c773db7169b31a0f9d7bf2789_JaffaCakes118

  • Size

    2.2MB

  • MD5

    d6949a5c773db7169b31a0f9d7bf2789

  • SHA1

    c185fd51e7c344c049b5190af44cd4bdb027dd40

  • SHA256

    80e4828c89f264f95e9b26e82a155cf1024e2947110468cca068dca062bd5d51

  • SHA512

    14a8ef3ac615157f280d812c542c293dcb3cddd423bfa23c98235e212252b4194852b20a539f1ef5f63bb1c68691f84067b15a2de4756acb35276ec68771f0a7

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZC:0UzeyQMS4DqodCnoe+iitjWwwO

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6949a5c773db7169b31a0f9d7bf2789_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections