General

  • Target

    b7db4be411c3c03f1699e7d702e7838b_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b7db4be411c3c03f1699e7d702e7838b

  • SHA1

    0b559163add41bc7cfa9cde1c11c9346a6346070

  • SHA256

    ba6a9a2c50240a2bcca52b9e24006bacc427c249ce52922fbb59a2044acee535

  • SHA512

    2c7e79a722c8bc5b0c6f25d457f6935eb78c9018d7588011c41f565f3feacaffcffba6558d7a062c5a21dc98ff332dc846c4bbdaae58fea6bb67a23e29a6997e

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ7:0UzeyQMS4DqodCnoe+iitjWwwH

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7db4be411c3c03f1699e7d702e7838b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections