General

  • Target

    37771c94363a747742cbc84946e301a2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    37771c94363a747742cbc84946e301a2

  • SHA1

    2e09faad9f8265b78354088dd1f6cdc0bb28f94d

  • SHA256

    eb43efbd652c6560169847c25b3d355886c1a69de6d8218d3e4c8a31b6a3edac

  • SHA512

    5ba7f3ccdf50a6c1b261ca8d1af0b5cde1b32a484dd6b0948831f3e4ca2998f62e997bddf63147d2350d1867c5c6444431f7e21e4af44dcece21e621d6250fd0

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZr:0UzeyQMS4DqodCnoe+iitjWwwP

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 37771c94363a747742cbc84946e301a2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections