General

  • Target

    b2c8d68de7c617544bf9cc02871e7cf1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b2c8d68de7c617544bf9cc02871e7cf1

  • SHA1

    08d31b5f73b474d1e5f8c8d1271208cac341fa82

  • SHA256

    a169049348f04d5bcfd1a328bce1d9b123ac2f3f20b2df522b0de8d4249bb5e6

  • SHA512

    76a76ece246d5a0e172b12617508566c43576cbe03c0678b39391da4232199d7323766121f93d1ba57373b1712ecec679c8e5970e474b275a849a2345dcfec55

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZZ:0UzeyQMS4DqodCnoe+iitjWwwd

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2c8d68de7c617544bf9cc02871e7cf1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections