General

  • Target

    b20a7e17f4d92bc75af1d8168d67eb79_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b20a7e17f4d92bc75af1d8168d67eb79

  • SHA1

    fc02b969efb61f93b844219a01e777013c7e2de5

  • SHA256

    a4b0d2a35db5f6dd2c6917193581d6d07b5ea17e9e70279d3a760328f2a622d5

  • SHA512

    915667e0105cbddf3fc8193d89e3f112c85a6a4e70a5ccd22c367712357390b6e0b8b644ff59c45591d9310618213fb9f4f935b3da15e99455708505fdf4959d

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZG:0UzeyQMS4DqodCnoe+iitjWwwS

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b20a7e17f4d92bc75af1d8168d67eb79_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections