General

  • Target

    04cfadd6cb445b66138b129687dcb677_JaffaCakes118

  • Size

    2.2MB

  • MD5

    04cfadd6cb445b66138b129687dcb677

  • SHA1

    fabcf151294bf0ad3f2ee498e0b353a32f07c6a1

  • SHA256

    777022212b9c313c785338de60fd360075dac342b1682050741d71d8a5297775

  • SHA512

    77f1cac957a5106e6b7593990a21a4ba73063fa68fd0bead65fd3fede01ab4773388b87e28eee25c172753eb9faf3ef0f444cc999be982e8ba01373ba17993c2

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZG:0UzeyQMS4DqodCnoe+iitjWwwq

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04cfadd6cb445b66138b129687dcb677_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections