General

  • Target

    b44a19a091c67b112e1058d80299c7da_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b44a19a091c67b112e1058d80299c7da

  • SHA1

    31df24ea348bccb90c60ab4274edd786253a3081

  • SHA256

    c589f87a0230b5418bb996e31cd87d90f0e1f47214a236cf50cd65f0965bb13f

  • SHA512

    4c69ccb2d4efbbd6300e38407f898d5e44df01ebb6e54a75e75561533f6ed9f5f0117221796c72981d750a5232f0ac2e7c2a79db8e343ae280e390ecf352cba2

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZQ:0UzeyQMS4DqodCnoe+iitjWwwk

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b44a19a091c67b112e1058d80299c7da_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections