General

  • Target

    b1bc2ab924f7fa98d65801ca6c7d5fc1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b1bc2ab924f7fa98d65801ca6c7d5fc1

  • SHA1

    82f737a1722beab39f828fc2eb5748caad52e540

  • SHA256

    2597fdaa6fdfb0518810d2034e3ab85b936420d644447fe755d9e9cb4b722638

  • SHA512

    ec46f41fa3a4cdd47f882165b1d2035cb1698527d95ad0918bfa3fc7b74f0d87373b18107764c334886d20bbffa76f0c1962c5fa0b55a9303f5055c37868c708

  • SSDEEP

    49152:0UzeyQMS4DqodCnoe+iitjWww6xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxr:02emw6xxxxxxxxxxxxxxxxxxxxxxxxxr

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b1bc2ab924f7fa98d65801ca6c7d5fc1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections