General

  • Target

    b0baca704d4ffb7652bc3b6c8fa701f3_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b0baca704d4ffb7652bc3b6c8fa701f3

  • SHA1

    91eb387b0918cbf64d5c8718f61c2296c4aa713a

  • SHA256

    76d68f1375f0bed784265cacbeae07b9db7dc34c56bad5a3d588e1270740ba49

  • SHA512

    f26a63b35cca7e4ebb59b31644a127ce69dd9823b4cd3e2d120f3ed0e9d3b8404a2b1b45484671456b1c692071340260929f61ea341255f24b90180f8e84d79c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZp:0UzeyQMS4DqodCnoe+iitjWwwt

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0baca704d4ffb7652bc3b6c8fa701f3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections