Overview

overview

10

Static

static

10

ea93ba24f9...18.exe

windows7-x64

10

ea93ba24f9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea93ba24f984cd43c9dd3991b6b17de4_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ea93ba24f984cd43c9dd3991b6b17de4

  • SHA1

    b4c6eb9a2a50dc2afe64a6b1504caabb97ca0457

  • SHA256

    2d0bb2ce23fd84795444003d84a0d601d3d769f873e136af99ce8c4e3c7a27ea

  • SHA512

    7b3f56e2b49e18a13e48cc8c521e8d7fe4d77e4cd12e40b850356b585275699ea9f02fd64bcaed4cad55a134c102ca81428d778bcf23bb14ccc7ceaf3fe86a65

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZg:0UzeyQMS4DqodCnoe+iitjWwwk

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ea93ba24f984cd43c9dd3991b6b17de4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections