General

  • Target

    b71bd9e5b0a23b77a89cd96e08c23fa1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b71bd9e5b0a23b77a89cd96e08c23fa1

  • SHA1

    c41bcfba20e726c6a33b255e80d085b148512f9b

  • SHA256

    26cfb5635c25a0b2cb1ee0217016b6f88de234210780a1948396bbe807e62aa0

  • SHA512

    c72484907ae87b7f8c8609c4cb070c4f972604933d68c902c21caa8e970d41f91f96dd662efafd90f2a487ef0b9edbd6d7a67c32d7634df9bc9c7cfd2ed3aca2

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZO:0UzeyQMS4DqodCnoe+iitjWww6

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b71bd9e5b0a23b77a89cd96e08c23fa1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections