General

  • Target

    0c32be1dd482e311c2f0d2aef9b22487_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0c32be1dd482e311c2f0d2aef9b22487

  • SHA1

    3cf4a9d1eab45ca55e71c9a91e0e483868da5644

  • SHA256

    a819f487a5f7a746cd98cd5d7998a7b91a8eefafacd08d6d5945604eef142c53

  • SHA512

    cdee93e88436e4da17525a1d33bc3f95b306ac47c59f985a9fa790a367fd2f97816fe6094593924a33417da146a032cacb394495add709ccbd7c993897d33c1e

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZx:0UzeyQMS4DqodCnoe+iitjWwwF

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c32be1dd482e311c2f0d2aef9b22487_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections