General

  • Target

    b46f07c80c0ce57e76af31761c7b16d8_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b46f07c80c0ce57e76af31761c7b16d8

  • SHA1

    d0fdf9b25a842bd8637742a62af341e2d027d1a0

  • SHA256

    d2bdcfdbf99f352a71b54948ba74111b29184e510b978443a3e04d6572901a23

  • SHA512

    df28dd9acc13df98e79cfee24914255be45328552329d1de90421666d9e9808c4038c1d3b5912a0b2be10e92eee6496687e90355dced337cd7e1df484538c4b3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZw:0UzeyQMS4DqodCnoe+iitjWwwU

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b46f07c80c0ce57e76af31761c7b16d8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections