Overview

overview

10

Static

static

10

dbe5639ea6...18.exe

windows7-x64

10

dbe5639ea6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbe5639ea62bc77b841cb137679079a6_JaffaCakes118

  • Size

    2.2MB

  • MD5

    dbe5639ea62bc77b841cb137679079a6

  • SHA1

    21188b5c3e40d6fa728b4d53f8271b53e8837c39

  • SHA256

    80f2e45cd4a3ee117adc5292e63e1f697ed6d3e33e7fc08671adfc58ba227946

  • SHA512

    ba1b59f6f8f3d8743aebb4f4eb1c5cc61dde28d8b97942a91d2463b44b3cec4f28e320bbf2a326919d1f4c9c095e9f0fd7ae61ab0353749759f7532959447fb7

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ1:0UzeyQMS4DqodCnoe+iitjWww5

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dbe5639ea62bc77b841cb137679079a6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections