General

  • Target

    b42a7c442a51ff9fae943454fb3a1d97_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b42a7c442a51ff9fae943454fb3a1d97

  • SHA1

    06c59255a286632d53e1b493705a4e6d3d686ed8

  • SHA256

    c932e6b71b730a750d72e03d3b3e1622420a4ea4cfba9a071cf533e9da517265

  • SHA512

    217c9ebfaa4e2bc84ea569416787933d79371393c9922aa7b5299f3a44c7a739afe2bd4471c4f1955281bcacb2642baf8909fdf9043baebda5418eb495ec98f7

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZp:0UzeyQMS4DqodCnoe+iitjWwwN

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b42a7c442a51ff9fae943454fb3a1d97_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections