General

  • Target

    b3a55c52aafeebc6228bdbf0cf0ba3ee_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b3a55c52aafeebc6228bdbf0cf0ba3ee

  • SHA1

    27ffb900405dc5ca25314bef5801c5f0a2e2d5bb

  • SHA256

    633cb6bc4e1f4053ca950a0f0a8e21c658b61c4347dd3d4a00d1fa4708b7898f

  • SHA512

    e9eba3bfd6957de714c824b109973d0e6d999095a1905a2bebc6c53415e8c53d27f49ea32db74d7312cd52a73530aad091a8cb79f171de81d83671ce27c5efff

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZq:0UzeyQMS4DqodCnoe+iitjWww2

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b3a55c52aafeebc6228bdbf0cf0ba3ee_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections