General

  • Target

    7ef8a1ca519969cdb6b65a4707b7b8f0_JaffaCakes118

  • Size

    2.2MB

  • MD5

    7ef8a1ca519969cdb6b65a4707b7b8f0

  • SHA1

    59ca07f56aaaf31a10b76099fc7caa9b5883c5ad

  • SHA256

    9c9155a99067440d56645ea48a737ab0758431ac07f88506dbca8b6372777181

  • SHA512

    53a1ec376b489fd03ad41312b9a4d843547ea9f525578a7a818d5c4a470193b24cc4134070d91dff450f29dd4fc014f7bb11b01ad1f80b9eacbfbaf01328f9e9

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZl:0UzeyQMS4DqodCnoe+iitjWwwZ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7ef8a1ca519969cdb6b65a4707b7b8f0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections