Overview

overview

10

Static

static

10

d9fdb708ca...18.exe

windows7-x64

10

d9fdb708ca...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9fdb708ca3c0b07fdc0528b2130a654_JaffaCakes118

  • Size

    2.6MB

  • MD5

    d9fdb708ca3c0b07fdc0528b2130a654

  • SHA1

    13cb1eea18aa0be3d2d56fdb6e315b93c208c39b

  • SHA256

    5cf82856b22981ef997683c82d9a12cab63cf5c2693ccb68bc1aff4b76aa56c8

  • SHA512

    c2ad0e3a4ae146ceaab77abb93f285ca85d35ba0eeb82afa0f6c57015ef4816e3326b2fed14ac2444ee6b3b78aa0c31adad3094b4bd24b1453241b1412eccf19

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlA:86SIROiFJiwp0xlrlA

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d9fdb708ca3c0b07fdc0528b2130a654_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections