Overview

overview

10

Static

static

10

dea96b4897...18.exe

windows7-x64

10

dea96b4897...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dea96b48971ca1e54afe9826cd04eb4b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    dea96b48971ca1e54afe9826cd04eb4b

  • SHA1

    c73ebf1d60fcdccab2dee5f13954c38818d23e7a

  • SHA256

    cd0909f6eba81e7a9945699985128f3e7d9a44ad5666d97ace1480d29cf32e8b

  • SHA512

    b9a23eb39f04472ad39840bcc2f5f20da983503dbe75ddd29165e0d3d842a9fd1c668731b7463f10ab768157466fc51a86311445bd665bae08e0f5cd581d84db

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrle:86SIROiFJiwp0xlrle

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dea96b48971ca1e54afe9826cd04eb4b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections