General

  • Target

    b5229e119190de4060b81133b17f08df_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b5229e119190de4060b81133b17f08df

  • SHA1

    98d0a3138bba6198b3154b3de9a69f01547a37d3

  • SHA256

    5ffd008b7b55a86d4d8d5f9197eb2ce420bf4f05f2c9df5d8d101eb06d653943

  • SHA512

    5471f6761efa2eb3a931076c9b87e3048fdabaebf4153e259b1c5aa557d4c6c0990439def1c62c13588b447b4141b791d12322f34feec3968a68712f97f7c817

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ6:0UzeyQMS4DqodCnoe+iitjWwwW

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5229e119190de4060b81133b17f08df_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections