General

  • Target

    11e33fbdcda38d2804a866bef6d2cafa_JaffaCakes118

  • Size

    2.2MB

  • MD5

    11e33fbdcda38d2804a866bef6d2cafa

  • SHA1

    0dd56a03da21c8d7c959faedb695ac4eebd61983

  • SHA256

    e27a4289bea72d2f8499b6a0bf0393371972456794b7b48a734ac7925a24f83a

  • SHA512

    8840d0f7eb798d7a0b07e8b749da45b12746b0cf4be1d2dff7efa15696824dc30b9d89f3473089dd2987a5b0cd67ade54f41725fffebfeea27dadc3a3fb9db52

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZA:0UzeyQMS4DqodCnoe+iitjWwwM

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11e33fbdcda38d2804a866bef6d2cafa_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections