Overview

overview

10

Static

static

10

f65118cc62...18.exe

windows7-x64

10

f65118cc62...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f65118cc62c7b37842bb659081c0d479_JaffaCakes118

  • Size

    2.2MB

  • MD5

    f65118cc62c7b37842bb659081c0d479

  • SHA1

    cc0c975082328bdc20c0aecf657acbf0a9284e0d

  • SHA256

    f65709b8b6c5ad5cbdb6cc418fbc0f009c4399866bae60d65dd9fd8afe07a521

  • SHA512

    3202deef8f65ee9b93356cc39b76c22788963a0fab732b92034174dfba1d4121c38dc44fddd131bde7fc22236d80e32b83b4ca28ef2dbba98e7d6984b5a7c91b

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZB:0UzeyQMS4DqodCnoe+iitjWwwF

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f65118cc62c7b37842bb659081c0d479_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections