General

  • Target

    0f74947f9126bc95567df69a61f67a13_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0f74947f9126bc95567df69a61f67a13

  • SHA1

    2e632f3dd70eb33ff79e757d82e0f88d059e8d70

  • SHA256

    8510fd28d846d9108b0908a3de5f213e4fc434b15a6fc33bdc4074ebba42f36f

  • SHA512

    23fa237434c4fe8a1160664a63f82e1f613408500229e6e41851955cd51219163fcf159e23e9f638e00754d3744e4a9d1bcd3e8e446a1fa1d480ce4517428999

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ3:0UzeyQMS4DqodCnoe+iitjWwwT

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f74947f9126bc95567df69a61f67a13_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections