Overview

overview

10

Static

static

10

f1a34b0f42...18.exe

windows7-x64

10

f1a34b0f42...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1a34b0f42d1cbfd1273555cc3015c50_JaffaCakes118

  • Size

    2.2MB

  • MD5

    f1a34b0f42d1cbfd1273555cc3015c50

  • SHA1

    b70e00ef121c8a250cbadcf140146849d74ff49b

  • SHA256

    8696b0e34f703560f489867e7f4844ebd2c6dc8ee2aa84dd12d06f98bf61c8c7

  • SHA512

    e02d0161be7030691067e62467226916933b65698275081d4c618ebc41f4ef6c82e4ecd13d640518c34dd2bc568d8b13f50980f86dba90f85935d24717360f83

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZP:0UzeyQMS4DqodCnoe+iitjWwwT

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f1a34b0f42d1cbfd1273555cc3015c50_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections