General

  • Target

    68f4c235a8071e2c389b433ea9899070_JaffaCakes118

  • Size

    2.2MB

  • MD5

    68f4c235a8071e2c389b433ea9899070

  • SHA1

    cb4c1ba7c31b3ab5823f6ea41f18cf6ab16dfa09

  • SHA256

    425f2f7a4452aede5b5204a6a7d30b8afb191464565d03cba663280ee78ef3cd

  • SHA512

    29299561f37a9c56089c62565b99f6cf6642872b03ed39e67ec24bf14a5230dd6ec0cd2473a475b79ad6d7c64d9fff076fcdbc5917c6edb7aa9e5d5cdaedfb50

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZH:0UzeyQMS4DqodCnoe+iitjWwwj

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 68f4c235a8071e2c389b433ea9899070_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections