General

  • Target

    b288421d42ef5eb41d7c25e88f831271_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b288421d42ef5eb41d7c25e88f831271

  • SHA1

    52d61cd8be8e9ef08cad2e31bb3efeedc3e79a01

  • SHA256

    2bc28702c0f77392ea605cefe68d19cfa1b53f0f6778f85116b0758f6b5b6084

  • SHA512

    cb66f9c416cb543dace4a78f6468fd166bcced654dd3bb3060b16cd901225fd0feee04e86b8fced2d4bfed5edb2d17bf4d368fa2d9c1d0a6ca5154326e030959

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZz:0UzeyQMS4DqodCnoe+iitjWwwH

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b288421d42ef5eb41d7c25e88f831271_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections