Overview

overview

10

Static

static

10

e980fa8b49...18.exe

windows7-x64

10

e980fa8b49...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e980fa8b49114ce072a3b4688159b4e0_JaffaCakes118

  • Size

    2.6MB

  • MD5

    e980fa8b49114ce072a3b4688159b4e0

  • SHA1

    14ce24304bc7bcdfbeac0622081ffd7ac2d769c8

  • SHA256

    8867d000078d61c29e8a5860d638ee83050ac409aac3b684fdc646e40487ad83

  • SHA512

    3701720549decf7d6f898a36b1fc6cac6a9f58bf47cdfd0f4b3c54566039ebc7488ceed1129bc3a5d27b73ef5415b03a13614fe772887d4af3da6a1be86c90ee

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl5:86SIROiFJiwp0xlrl5

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e980fa8b49114ce072a3b4688159b4e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections