General

  • Target

    051cb7a9e12667f2e27d8ba7026d2e32_JaffaCakes118

  • Size

    2.2MB

  • MD5

    051cb7a9e12667f2e27d8ba7026d2e32

  • SHA1

    a37fce08834a493ff4120fb58f22420c6d042993

  • SHA256

    5239ab5be83ebc871521c03771d912e5f9cb96552cc9b38b27e97bbfb6c45b2e

  • SHA512

    a9f09a33a559031f43aef8bd974ed396c175f67273c5211b71fe607ad5dbc6b237cb40d596f63a363ee7a992178ef07fb8a38a3331fc4d8d3dc82c944c533b87

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZw:0UzeyQMS4DqodCnoe+iitjWwwM

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 051cb7a9e12667f2e27d8ba7026d2e32_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections