General

  • Target

    b11a64eb911e5c692ba44026a4ed52c6_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b11a64eb911e5c692ba44026a4ed52c6

  • SHA1

    53b3fbfb8f27df5ef7f67efae6b817b89f397636

  • SHA256

    52738e9648306d0e328567aec639bd05739b54a03aaeea85dcc6191a5b325ddb

  • SHA512

    ece35e391b4e1bf844f1412445a7c50592ff56e11b97b6ba003c8e8594e2408a1f348c08bfb9db5c8d8e70f95dc4cfb3ce44547614326024c94b3da480e1eaa9

  • SSDEEP

    49152:0UzeyQMS4DqodCnoe+iitjWwwMJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJT:02emwMJJJJJJJJJJJJJJJJJJJJJJJJJz

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b11a64eb911e5c692ba44026a4ed52c6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections