General

  • Target

    71807070c90005668311b886d095a742_JaffaCakes118

  • Size

    2.2MB

  • MD5

    71807070c90005668311b886d095a742

  • SHA1

    348a47c7cdb228f882e17b3e7369fdeb7a37204e

  • SHA256

    1cfe2488e5f3c1e493ccabff6d635c850f1a680aafd7e471c15dbfea4ff86ffe

  • SHA512

    4c40416b8a9a797ec656da548d4bbb7a30da1497483e95c41ff86a9ac47fb0bf3d00716c3e3b954a03df6dd4f94618d5ddbe20f88e4585c3c002f5cef3a5fff9

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZy:0UzeyQMS4DqodCnoe+iitjWwwm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 71807070c90005668311b886d095a742_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections