General

  • Target

    0d455dd0cb5df3abae75a5075ab513b1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0d455dd0cb5df3abae75a5075ab513b1

  • SHA1

    16b0d784a282ffc1ece91446e3fedb5b8a6aefe1

  • SHA256

    be10da3b8c1ccfa92155e0bb55d9ffaf31f56173bc78d0240de186b214f315d0

  • SHA512

    5ce3cb3ff0861b949052295d6a69f4775efacd822a23cc47d449a2f75d8a02f1dabde494ce8f5aac0aa8f0c00a3361888ea0aad93c101019b38b3eb6696a97fb

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZZ:0UzeyQMS4DqodCnoe+iitjWwwF

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d455dd0cb5df3abae75a5075ab513b1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections