General

  • Target

    b09811f661cccd5260355ea5bede8fc5_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b09811f661cccd5260355ea5bede8fc5

  • SHA1

    4eb34dfe5eb9d36885d2b5d4a1190db569da91df

  • SHA256

    f9e92cab16aef6d5222ec24086f332da752ab56ee53a3c20aff6557509a9a97c

  • SHA512

    3b8ec59331febfcba88e8341041d80b41797c744c354a0501501f261b9dbf0815208d12832885d4f1ccdabcb6636dd3c3d1b4c42805901b67a051a3cb8fd4330

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZn:0UzeyQMS4DqodCnoe+iitjWwwz

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b09811f661cccd5260355ea5bede8fc5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections