General

  • Target

    683cc9d33359e0ad9ce35333f03f548b_JaffaCakes118

  • Size

    2.2MB

  • MD5

    683cc9d33359e0ad9ce35333f03f548b

  • SHA1

    d30ddeaa13a078fb8f80325775d6c025f2393bd3

  • SHA256

    04fc5595caab211a75842fdc72527cd755491ddeb1f86294970260bd65697777

  • SHA512

    62c5e906c7abd7db8982198ee45cbc8425a8f13dfbe65534c38a8f683c945a19dbf12db4a8b1f0088bd0830adc29ef46b112e21a17a315c3f2eb69ba6cff041d

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZe:0UzeyQMS4DqodCnoe+iitjWwwC

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 683cc9d33359e0ad9ce35333f03f548b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections