General

  • Target

    b35b6c2e4c340169d10485ed325cd091_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b35b6c2e4c340169d10485ed325cd091

  • SHA1

    d4a20c13a148e8beac91b292bce5565070f36f58

  • SHA256

    5e7399bffb84772339fcae7aa81fd25f56913c3c827c8365ed8f802d48b281ea

  • SHA512

    64235883e5cd0fc637b7af0091e7b08a12130086d4e33d88404d6f891f2494054052badf2d3cdc577e604110d864107c9e7f54f1f28f9d743bacfe1453d23b41

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZg:0UzeyQMS4DqodCnoe+iitjWwwU

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b35b6c2e4c340169d10485ed325cd091_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections