General

  • Target

    b7658f7ae32613ce987a2e14e92ff69f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b7658f7ae32613ce987a2e14e92ff69f

  • SHA1

    f5fbaf1fbc1c8526b6020b57ec0f652c2a5140c3

  • SHA256

    a851784d9658a6765227c55aa2b52d5838b57ce6ddbe88a6d9bc97c3a8e9ce3f

  • SHA512

    c8851cc7ca2d720b7e1d7dedc4da3e02bb32e7c46dbd76e72c1e2154cc8ac8b69adaf2bcbfa3f1ebe9db05164d766abf3c15119b263f62ca82d9c5863cbffddf

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWwwW

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7658f7ae32613ce987a2e14e92ff69f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections