General

  • Target

    256e34dfd1f5d3e9775f6f6ced12e117_JaffaCakes118

  • Size

    2.2MB

  • MD5

    256e34dfd1f5d3e9775f6f6ced12e117

  • SHA1

    e89715dafd23bc78c934737121c32f5d1e5b7ac4

  • SHA256

    366175cfa9be630f9242d87732269c6c09fb4edbdbe979f08f424bf0f17022df

  • SHA512

    de8030a1e9e04a8be3feb73f2c0462980915dd09d381afd02dee02a00064acde704b2669caaf72467d8c09bf77a2f8f2131a68ea0a365ce7f93534c4a8fa8f56

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZT:0UzeyQMS4DqodCnoe+iitjWwwn

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 256e34dfd1f5d3e9775f6f6ced12e117_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections