General

  • Target

    b7b8170fb110eb99f9e5821852810265_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b7b8170fb110eb99f9e5821852810265

  • SHA1

    a1b716631aae202c1bf4737a004fec312cea50b7

  • SHA256

    af87f8cd25fae86b9315d62b69959864323727296ecd3be43555aac72832c66e

  • SHA512

    28b13876629f55fa76a27208213f0768513417854a5835cb7642c203438afa9680ab215635cf9156f76dbac7cf189dfc638331c5d54f83008bdd70eda373579a

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZt:0UzeyQMS4DqodCnoe+iitjWwwp

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7b8170fb110eb99f9e5821852810265_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections