General

  • Target

    3db5726b7cee4c4f04822dc3a390d67d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    3db5726b7cee4c4f04822dc3a390d67d

  • SHA1

    1b35c806639aca8cd35b7c980971d3885bc293d0

  • SHA256

    7d16a6634a617088d0ca94bbf6dba8c7cbc9b89416ac4e97bf25403b6faf9976

  • SHA512

    9e4d7e8e64183837296bfc2866baf28b897c086c2dbbca4139c8510176da2aab36a25c79cf1df0040e3b85f197f91074ce2108741bcd076c39f858bf0658278f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ4:0UzeyQMS4DqodCnoe+iitjWwwc

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3db5726b7cee4c4f04822dc3a390d67d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections