General

  • Target

    570f95c7a34e9c11f4227bfe194b233f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    570f95c7a34e9c11f4227bfe194b233f

  • SHA1

    1108ae050dee2f263c1b54dc2f1f8fc8f93285ab

  • SHA256

    76e86389d4a185a712524bad2098581383f6b909fdd922d443d28dcd9751d432

  • SHA512

    8661a46b5dc085c3171a39ba871048b4855406f5f74f279edcccbecfc8e4cd543174676d0e97aca084e7a91cbd500eb154975e56ff336737a5fd1397a7f9e13e

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZU:0UzeyQMS4DqodCnoe+iitjWwwA

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 570f95c7a34e9c11f4227bfe194b233f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections