General

  • Target

    231f2ee3ab2a354f37c8de3c1f29304d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    231f2ee3ab2a354f37c8de3c1f29304d

  • SHA1

    27b4f8a3c4431f8d8ca0be58afb45f8279ef72b1

  • SHA256

    6b70b880de9ca1efd746c24072ade9c7d27d0ce867f3407ed9b2167e267ce2ad

  • SHA512

    9efbfef6c387ca20eb2f258a82d0f06c95289eec66417ed4d096372ad449bdcebc2a55429d331e29593992a6fe1e5666168086f95967339c7d27938070ef2e9f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZE:0UzeyQMS4DqodCnoe+iitjWwwQ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 231f2ee3ab2a354f37c8de3c1f29304d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections