General

  • Target

    53b833c061a75f9bc9229d6065e4cf9a_JaffaCakes118

  • Size

    2.2MB

  • MD5

    53b833c061a75f9bc9229d6065e4cf9a

  • SHA1

    75b537204c2cae3a6351d8f6bc36ff2c5944ad48

  • SHA256

    19bf8a4172d0828874dfcffcbec489822342211d058d1161ce6b25366252a4d0

  • SHA512

    22299741a940862793aef26c96c0068334a1c185c6763bb028a167b9d32ca0f147fbfdd5cbfc5e0be764de44b410886da9c85f3285d8dc66162c8c65a68fa174

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZl:0UzeyQMS4DqodCnoe+iitjWwwp

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 53b833c061a75f9bc9229d6065e4cf9a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections