General

  • Target

    1f536011b22e8f67d726aceacc224b54_JaffaCakes118

  • Size

    2.2MB

  • MD5

    1f536011b22e8f67d726aceacc224b54

  • SHA1

    54ee7c50518edbfff986ff767cdc5e5b2dd3c22f

  • SHA256

    48912ab1ee6fb00c4f0649bb2d0c76275b74966871b173b617bf62bf8f1cb74a

  • SHA512

    8e344ea51145a418c074291c3e6ab6aac61e557e7336f739dbebaeee4968bb2be247ce99df7e985e63ad7f38baa9dfc740b3de9a549aab4a3f52d1546a45cfa3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZR:0UzeyQMS4DqodCnoe+iitjWwwl

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1f536011b22e8f67d726aceacc224b54_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections