General

  • Target

    23d2f10a5ebd58331d79e9561250475e_JaffaCakes118

  • Size

    2.2MB

  • MD5

    23d2f10a5ebd58331d79e9561250475e

  • SHA1

    0fe746efb8e8b68bc7b5dcb2378f14b84c324208

  • SHA256

    e046b6ee7ed016f23964e19688642b929f97a64b612ef12b5ba4f5ee048d4f33

  • SHA512

    7918cb4b159e6c386a87b9c17ac3e07470f0dc6912a4600cd149b308eedbce0782826813907a0f8efe2ae16c6cb618d5fe1fca2ac345fc83e561c6f2c8d94d59

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZM:0UzeyQMS4DqodCnoe+iitjWwwA

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23d2f10a5ebd58331d79e9561250475e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections