Overview

overview

10

Static

static

10

f48d6a1d84...18.exe

windows7-x64

10

f48d6a1d84...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f48d6a1d844fd99e1ea58ba1f8ebab33_JaffaCakes118

  • Size

    2.6MB

  • MD5

    f48d6a1d844fd99e1ea58ba1f8ebab33

  • SHA1

    640172f8a50779bdd7b7fe1f3b5584a85d3d895a

  • SHA256

    d61082346278ec8592d8ead75bb4aa09d4f91920b988c70394dfa0c63332445f

  • SHA512

    c4ff70fc1380dbe773f621061b8f61daa0a919a9b3f3ec09794b05f0216176cb4e73223d14083e9d71484ddedea6e00f29a4975d833b51666020fadb5371239c

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlE:86SIROiFJiwp0xlrlE

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f48d6a1d844fd99e1ea58ba1f8ebab33_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections