General

  • Target

    46104a2dcc6fcbc2e2cecce10383ad6e_JaffaCakes118

  • Size

    2.2MB

  • MD5

    46104a2dcc6fcbc2e2cecce10383ad6e

  • SHA1

    ce5ff2e258e853e4d57282e86d406d64300d2d3e

  • SHA256

    057cd4295a552ca27ad629e15bc8d00be1b06d3865b49e97e370caddb5481991

  • SHA512

    4d9fa604de9499b163d1af7f05ccb703222fa62c0f1e37fabba5ba937c279e20c0fd05e9d6fb1a99161f4954cb85b92cb3aa4bf63fa5a9ec21a3a9e920ae8c17

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ0:0UzeyQMS4DqodCnoe+iitjWww4

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 46104a2dcc6fcbc2e2cecce10383ad6e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections