General

  • Target

    b656d34341fea2743a333c62aab4dec6_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b656d34341fea2743a333c62aab4dec6

  • SHA1

    a6a9266200cc4bfd39158d18316970bf409612c1

  • SHA256

    47322da74a27c70791023c3dbd7462612be88cc301f1e3eb533b4305588421cb

  • SHA512

    38a9e6d0c9bac45ee7ea26a571a86c08cc33ef0b1bc4c0a197dcb59a084e8414d57cc8607acf2d483a9d9a5b30bb72bddcf439c06111fc998ba0d1607a282c64

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZh:0UzeyQMS4DqodCnoe+iitjWww9

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b656d34341fea2743a333c62aab4dec6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections