General

  • Target

    adc3d8dff4eef96010e7df5c3a7700fd_JaffaCakes118

  • Size

    2.2MB

  • MD5

    adc3d8dff4eef96010e7df5c3a7700fd

  • SHA1

    699a5ea531cdfcbecc9521ac4a7b0a1891c6577d

  • SHA256

    81f29cf0ac3fef00d6ab193b8191dd86984f6a30e7fa8e23f630f4eb555c8afb

  • SHA512

    2911a198d753bfc6401065cbd535c2aa7bc86a096d2c527ee4e6526e3cf3d691861ada5aa50466848ee26fa19a762ab2d017c1df5ee5312ae69164a591d9f588

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ2:0UzeyQMS4DqodCnoe+iitjWwwS

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • adc3d8dff4eef96010e7df5c3a7700fd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections