General

  • Target

    b34641be5480822d62cebb15b98bcb78_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b34641be5480822d62cebb15b98bcb78

  • SHA1

    f054cc1b1aecb120168f253f3ec238459213730b

  • SHA256

    e1a870e1a3a34030638114b8366def0b352278fdd27c057c11bcfff8307114f4

  • SHA512

    33da3782fa4373dff7ba10ea9fa2ef3b19b9f467be43a860bbd51490726ffa2834a9faa35a0a3d44354b413308267257308ab12fd6c61c2fd0c7343085fb1e17

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZv:0UzeyQMS4DqodCnoe+iitjWwwr

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b34641be5480822d62cebb15b98bcb78_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections