Overview

overview

10

Static

static

10

fb0dd0c2f7...18.exe

windows7-x64

10

fb0dd0c2f7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb0dd0c2f771b636a8d9b7e0a5fbd3e3_JaffaCakes118

  • Size

    2.2MB

  • MD5

    fb0dd0c2f771b636a8d9b7e0a5fbd3e3

  • SHA1

    5b016022aa912556dc709b5fbf36ce59caa9287f

  • SHA256

    afa7fba1eb79d8ebef8e8f3963084d462164c7ad54fe2c8d2eccd24a8da5c279

  • SHA512

    0c609cb072cbef1e18cddfc492512b756b292fffe54b1d0556b59e1083cd1b88ef4ffaf4cefea16dca8ec3122f007d837f3066511c3779164fd622eda661328a

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ2:0UzeyQMS4DqodCnoe+iitjWwwy

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb0dd0c2f771b636a8d9b7e0a5fbd3e3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections