General

  • Target

    b0dfd03ecd33c230e5d78132ff05c0df_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b0dfd03ecd33c230e5d78132ff05c0df

  • SHA1

    36c9f4ca8c93a6ceabf685ea6df3ae193d24da0d

  • SHA256

    7d48a2cae5b1e211c824aaa2e6ba9cf082b8ff6331c49b79187cb9a6d128f052

  • SHA512

    d0faf26b186eeabf6493f3e4d38aae6e622c85c979c6d9f08c06c4e428e3de1613d94b4d1202ab65d775dbded4554060de79c195092d20c2266ae91f410f622d

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZu:0UzeyQMS4DqodCnoe+iitjWwwS

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0dfd03ecd33c230e5d78132ff05c0df_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections