General

  • Target

    4f3c0129042d31bdba830d48890ef4ea_JaffaCakes118

  • Size

    2.2MB

  • MD5

    4f3c0129042d31bdba830d48890ef4ea

  • SHA1

    895ae0f62b5e220f47f5445457d85fbaea544597

  • SHA256

    1f242d3da55a21b90faab4adbad4ed9fb46e3071b65af5b0d55f6de9b0fc7d6b

  • SHA512

    3734c1fed2d1eae9f00f7a5f8801f7f2ab12c24c4a3404b4b38a19f1092a91f4126654aaa1441dd11dd4290a0997663b05c8f90302f89938598fa18639e18987

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZJ:0UzeyQMS4DqodCnoe+iitjWwwF

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f3c0129042d31bdba830d48890ef4ea_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections