General

  • Target

    b07aa04349b18b6cd4e67d789e2f05ad_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b07aa04349b18b6cd4e67d789e2f05ad

  • SHA1

    410ff4248564337e1fe97d8a057eb9546bd6092e

  • SHA256

    2f4b34badea614593425b69c4d0adebb5fab528939699388f6bd69917f31c1cf

  • SHA512

    5e50b550ac050e041f00b2f87a11d59bc45070fbcbbf624ac215084e2a95f865baed4d52c1d6d61339a3438598ac7f63847532463092808c3825152050c4fb9c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ1:0UzeyQMS4DqodCnoe+iitjWww5

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b07aa04349b18b6cd4e67d789e2f05ad_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections