Overview

overview

10

Static

static

10

dad37c44bf...18.exe

windows7-x64

10

dad37c44bf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dad37c44bfdf5942ac38a1aed6ae21dc_JaffaCakes118

  • Size

    2.6MB

  • MD5

    dad37c44bfdf5942ac38a1aed6ae21dc

  • SHA1

    d590f9d2fc591344fe09c875f1d7617ab8fc358e

  • SHA256

    ede17cc03680cfcabc6f96ec21597004356eccd097396c09d6bcece8fe06928f

  • SHA512

    99a7e1d252946eb312c9528befee2a7bb3b45b784d8bde36f6a4f0f510eb1b4f239ac38f2120edd71027ee735eb0253889695b89a724be138f4f2bb36a0c8a25

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlo:86SIROiFJiwp0xlrlo

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dad37c44bfdf5942ac38a1aed6ae21dc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections