General

  • Target

    68aa5c91d9f506f499785897daf97fe1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    68aa5c91d9f506f499785897daf97fe1

  • SHA1

    3fc25746c3d55916ec261d6f739faada78aee128

  • SHA256

    789b293addef4f8cb2b13e407497f9fdf75861644fc1d7b4eca02629b7c71ffb

  • SHA512

    b5b459a57bba4786d44e2e1a41e138f036958e572324815a09bde27801f1ae5707cb3663bc3cad2d5a76009f420c0bb618f1b84594fd7329136f73748b521581

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZV:0UzeyQMS4DqodCnoe+iitjWwwh

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 68aa5c91d9f506f499785897daf97fe1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections