Overview

overview

10

Static

static

10

feb0f91c3a...18.exe

windows7-x64

10

feb0f91c3a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    feb0f91c3ad42d9236f64d824c026bb2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    feb0f91c3ad42d9236f64d824c026bb2

  • SHA1

    49a55caea95ad26ed07fd63503876bdbc4fa53ea

  • SHA256

    102175e514ea5b4253a86265c8b3876b8923248b7ed0eab466522b6d9ecd8b64

  • SHA512

    416aad67f9ccfd996d29bc992d406e8a2b36f87d44403dbad86504eb1c7663aad1dab7d4965dea379967715fc43d1c5423a511b807f707510264d6fd65ad88aa

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZb:0UzeyQMS4DqodCnoe+iitjWwwn

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • feb0f91c3ad42d9236f64d824c026bb2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections