General

  • Target

    b29d3f7c9e1a5d5265072e747250db91_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b29d3f7c9e1a5d5265072e747250db91

  • SHA1

    4308c4368897a5aa54ea2d6b03b002d66d78df90

  • SHA256

    7e0737b4f7c6e6c8515038369c9b8c7b3a75c10cce7c2f96b7465adf6d7c2d27

  • SHA512

    250dc5278e65d64df601a3035d382a75be6d310e98bb2c5a530c06276ecfcbbfd6f55c7a931ce3b4da3457a62f1c661fc17124ed3c417a01e643ff1aef8d9b3f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZV:0UzeyQMS4DqodCnoe+iitjWww5

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b29d3f7c9e1a5d5265072e747250db91_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections