General

  • Target

    4ba4701e188d6e170623916b0b3a50da_JaffaCakes118

  • Size

    2.2MB

  • MD5

    4ba4701e188d6e170623916b0b3a50da

  • SHA1

    c2a9626618fdd4f2bc70c60408d93700c6dc1a73

  • SHA256

    1a05313de0a8785d96fa6851c7ee49684a087fc189b52a4ababbae8ba32790db

  • SHA512

    4cf03aac48a20af112f190a306fdbd38128c20f653c4d2baf2b045cd6e3e7e4be1c305dbb167d1763557a6c61f7e90b0d7ef77ee06dfeaf4823b23d2a9e5b269

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZx:0UzeyQMS4DqodCnoe+iitjWww9

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ba4701e188d6e170623916b0b3a50da_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections