General

  • Target

    b06595ee6dd9807df7235cb5d4caeb07_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b06595ee6dd9807df7235cb5d4caeb07

  • SHA1

    52746dc3a48a0ba2d6ab95165fb2b0a83ad4bd2f

  • SHA256

    ae541b45da193ebe406ba5e532416dc8389eff458ab997076f5352172528b09b

  • SHA512

    6edf16a48054616339ee6c4bd44f53bfab7b9e91cb462198c9b3a4444b06569df812bd1867e7a55fc4eb522d5a36df1cb31490682581059d0c6050e41517dcf3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ8:0UzeyQMS4DqodCnoe+iitjWww4

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b06595ee6dd9807df7235cb5d4caeb07_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections