General

  • Target

    23482402fdeb1a405ed43b1afe861afa_JaffaCakes118

  • Size

    2.2MB

  • MD5

    23482402fdeb1a405ed43b1afe861afa

  • SHA1

    e74f582f754d2f79802064bffae76b558386e078

  • SHA256

    92be19986039efe0bb0f145c9db7b51eddb7770f985b7a1dc5f9f8c71a1ab232

  • SHA512

    bab840ea4852b8587274de12b23523a19ce407cbf279d71b5f7e3e5bba013643b08f2cf1c0810189c49ba68a1d91bed74b1a7267b8ce1852d45200bee5e57349

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZk:0UzeyQMS4DqodCnoe+iitjWwwI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23482402fdeb1a405ed43b1afe861afa_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections