Overview

overview

10

Static

static

10

d7a43f8a46...18.exe

windows7-x64

10

d7a43f8a46...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7a43f8a46a17b699aa631fef9fe5be8_JaffaCakes118

  • Size

    2.6MB

  • MD5

    d7a43f8a46a17b699aa631fef9fe5be8

  • SHA1

    722e4c522ac0e926104a9ba3af4bd5aab698146d

  • SHA256

    f76226a4167a3fabfe5f06ad1556e8b7ec4d4de320e2a301dbeff879046c5908

  • SHA512

    c839a7d9c40d86b7bbd23754172c3e305078d6cc523b128f4e799122017fb7a498d224c6661f4095c739740171cfdf76dafbdcc5cdcfb28458b931ac9b2aa736

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlz:86SIROiFJiwp0xlrlz

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d7a43f8a46a17b699aa631fef9fe5be8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections