General

  • Target

    b2b13ec892cf1d7c9edec511d24e7a16_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b2b13ec892cf1d7c9edec511d24e7a16

  • SHA1

    3b100fd30d33aa5f5d3c36641d81c45bc8d9cc3e

  • SHA256

    3d6157e93b0987661cdbcd795df83035fa742b7810a9cbe61a638ee2d086bfc9

  • SHA512

    8610a0bcf97b7f2e22261b759101ff66b43c5a29c5c20cc6f484ad30e42d3f3b498584d895491d27f8cbb0a23ede63907538034f12fdd0f55ea19194abf05e17

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZQ:0UzeyQMS4DqodCnoe+iitjWwwM

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2b13ec892cf1d7c9edec511d24e7a16_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections