General

  • Target

    b2bde44e140ba8d4861cc7c8849cf800_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b2bde44e140ba8d4861cc7c8849cf800

  • SHA1

    f9fe8dcdd4129d44a60a49598fc9d85f5d15efe7

  • SHA256

    dd662e3480bd9ab6778103132b1a2d26a731c586cfeb115bccdf4ed92b6263a5

  • SHA512

    e1cd08577ceb7e9100bd06bab5c02d1ab13565eed48fbc57daa38a9a8a2d7f4e8efc2994715d765f2c98e6a8cd9b3ec04ecb2e84714a820881036c66a1faf4f6

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZh:0UzeyQMS4DqodCnoe+iitjWwwV

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2bde44e140ba8d4861cc7c8849cf800_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections