General

  • Target

    79b2723e72eae021ab2bf553b63ea669_JaffaCakes118

  • Size

    2.2MB

  • MD5

    79b2723e72eae021ab2bf553b63ea669

  • SHA1

    a102b270cb6703561a80e6278c0b133c8e12d217

  • SHA256

    4ad881f2af0b3eccb7446efcc974648ee003e2a54152932fa08460bcb3a9101d

  • SHA512

    277aa1316935523c304e48e8b03ae3f8c9029dfc856cb0fb8901a491ae1bcef06dc9636de010d97b26f81a202b4f12e2893aced8448198cbfdf374fa0f5a80ee

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZt:0UzeyQMS4DqodCnoe+iitjWwwx

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79b2723e72eae021ab2bf553b63ea669_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections