General

  • Target

    0dc845c4def1a98f5f4e671a95b033e0_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0dc845c4def1a98f5f4e671a95b033e0

  • SHA1

    55c4edf36e0ec5ed6cc9149cf7c5692eac62491c

  • SHA256

    ce3b9da9f237ae52a7b4142ee3e7bc508fc0949b39ec5ab5672e22404967a956

  • SHA512

    c817cc3fc7ebee1805f49bf6fd4e7abf82b14dc17b336c14bd3bcef00d2a0a1876598f1709b24f7360ec56366c5b544cefe74c98b40c0e0b4b40c81ac872d3c4

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZw:0UzeyQMS4DqodCnoe+iitjWwwc

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dc845c4def1a98f5f4e671a95b033e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections