General

  • Target

    255a85f9a65ef9a8a1122e30f8540c22_JaffaCakes118

  • Size

    2.2MB

  • MD5

    255a85f9a65ef9a8a1122e30f8540c22

  • SHA1

    204eebcf1e9994e922ed5159f5bbf09e4af10fbf

  • SHA256

    2f4060ae83d0fa5a9825848c8cbadc314e7b6f14dcbc8944957b8aad5c98059c

  • SHA512

    47db7e1a0f979e9de723e4c5881816a8598311bbaab9df2aacdf338b77e641b667feede6920850d6505f3e49b49d7262119447416b813c4d3f6dde0ec04e2c46

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ3:0UzeyQMS4DqodCnoe+iitjWwwL

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 255a85f9a65ef9a8a1122e30f8540c22_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections