General

  • Target

    b08b2d4c9248737896d3eb3441e7707d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b08b2d4c9248737896d3eb3441e7707d

  • SHA1

    2638a67248ce1af629a312be71e8c4a0e60bb652

  • SHA256

    477c5c67ac446eae6ed7df7e4ccd450b21306dead06a3731d72ad06ba566a45a

  • SHA512

    ce4d2356ec895e6951d0539bce251c4c6c193a0c6df13141f7fb8e8e75c33345845bb87378cc0e70a48f028a68181a3a141b841731797d7afde5a4461992e699

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ9:0UzeyQMS4DqodCnoe+iitjWwwZ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b08b2d4c9248737896d3eb3441e7707d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections