General

  • Target

    b724a625a3bdcce272cab28443ff2032_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b724a625a3bdcce272cab28443ff2032

  • SHA1

    4bbba7f8cc4fe50adfe58e4f7fa8f3a01a35da7c

  • SHA256

    0de3b883dcfe01f710daf8af72ac4b25c2f6b27e7588b0a00f2530089f507ed1

  • SHA512

    309321d6c8534f8e9169e17c42bdf9ac66c87e127c17706592ed529136f802bbfd550f4d0a180f3aee9685ba29770f1744cd41f1582720a437a6dbd6cb071932

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZb:0UzeyQMS4DqodCnoe+iitjWwwP

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b724a625a3bdcce272cab28443ff2032_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections