General

  • Target

    728eac999a91b0617231b002fa305343_JaffaCakes118

  • Size

    2.2MB

  • MD5

    728eac999a91b0617231b002fa305343

  • SHA1

    87e2f671d62c038ca9f69ae77bb71c7b20f0a055

  • SHA256

    b3fddc600956aa70c37e7378be09532f804ed92ed282c84cd39f641ae60ee59b

  • SHA512

    d190a037844aafded9899058e99b2b06fea5b85a0cee19d71da995a4d4a3cd609cc2d4fcedc4dc7f0d3bf16c10d3f03b8109ac9c16016c8c0060ae69c36596bd

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZu:0UzeyQMS4DqodCnoe+iitjWww6

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 728eac999a91b0617231b002fa305343_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections