General

  • Target

    1fb2d6db4b5e4fad1f69a0e01d6b7fd3_JaffaCakes118

  • Size

    2.2MB

  • MD5

    1fb2d6db4b5e4fad1f69a0e01d6b7fd3

  • SHA1

    9d13055089f7c37d34b146754d23b4ef005b291b

  • SHA256

    7122f35e1727ae6be51e229656e2cde638421a90b841ef810176b48d094c76f1

  • SHA512

    2e0e0c0e5bd22a224f349a858ffffeba39cb064396bebdfa00e0d3a4e1253c7e90dc5d4b62091264e87f5beb2694545819d1edaf127d8023b490d7042badbe67

  • SSDEEP

    49152:0UzeyQMS4DqodCnoe+iitjWww4/////////////////////////////////////b:02emw4/////////////////////////b

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fb2d6db4b5e4fad1f69a0e01d6b7fd3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections