General

  • Target

    b7aaee148410ddc9828c1394b74b1fce_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b7aaee148410ddc9828c1394b74b1fce

  • SHA1

    daf55790f93ccc77e1daf7896f456e8e787ac57f

  • SHA256

    c416cd7d66bc4c76742ef7d2b72b08ef06c7728587f27119a46941f3de06129b

  • SHA512

    08ccfb24985828c6eef5d87c8844bf49790ebdbd549015553c65cffdb9d09f6627adcec89e974f1bc3a307c953ff9f7fe8027809c2a69f64cc4573c46e1a4479

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZC:0UzeyQMS4DqodCnoe+iitjWww+

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7aaee148410ddc9828c1394b74b1fce_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections