General

  • Target

    05cb4408706454932b641589f37b77a0_JaffaCakes118

  • Size

    2.2MB

  • MD5

    05cb4408706454932b641589f37b77a0

  • SHA1

    cebb716f2917475691db55c4965eb92c3d5a23ba

  • SHA256

    1ed78e698cad641523be06208c8e0e72f1739f3bf8049b025a9281e34ad07c44

  • SHA512

    b492333ab1b78e8ee62dadcaf2e4fb69f60845a709caad645ff02ab36b956b855662d9d1ed8f1ef2c9d0e6192be94638a86eaa126e55d14e488f646748683dfe

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZS:0UzeyQMS4DqodCnoe+iitjWwwu

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05cb4408706454932b641589f37b77a0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections