General

  • Target

    23602e61cbbc9b2568c46abdc173d9fd_JaffaCakes118

  • Size

    2.2MB

  • MD5

    23602e61cbbc9b2568c46abdc173d9fd

  • SHA1

    fbbdcc9b02d5a28b665225a7d5a74595266f4d99

  • SHA256

    169e9afc481b844c64747488826f254802c94333b41a4491ae513900fdd0f1e0

  • SHA512

    d5f3776f0555628cde42dab57afddae3bd4da0a858fce7d3aa688456e797f05bf99c4fca5ab6ef347ddf5d6068809e0f311b938cd313f424713e5f48731d023b

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZw:0UzeyQMS4DqodCnoe+iitjWwwU

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23602e61cbbc9b2568c46abdc173d9fd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections