Overview

overview

10

Static

static

10

f47b79bdfa...18.exe

windows7-x64

10

f47b79bdfa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f47b79bdfad9edd1ed7fd366f1d18992_JaffaCakes118

  • Size

    2.6MB

  • MD5

    f47b79bdfad9edd1ed7fd366f1d18992

  • SHA1

    be43ace10be215204281d26ac6966868e3fdd6b4

  • SHA256

    ec07a52c90cbd46fb6abc596e50c27f5be986434f7229a8c82f031c7591c18da

  • SHA512

    d56a38dfa2abdfc877153dce8da634eef29bd515923b5ab7f81d5f0642380b7506d816df5d7dc05796489181917b4308ee9a503355c8bc273c4b3a47a4bb693b

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl+:86SIROiFJiwp0xlrl+

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f47b79bdfad9edd1ed7fd366f1d18992_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections