General

  • Target

    b82ada100c0e105dd5d04b905d64ec3d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b82ada100c0e105dd5d04b905d64ec3d

  • SHA1

    e69fb477a00f74ece1f9f03a99a6a3d020a8b418

  • SHA256

    d36d6edef12db42a0f0d9e376a12b7cfb19fc250b7634792edb9c512d1f70450

  • SHA512

    4b81d445cf36e3e79a122c55b5cb727060c166fae4e6ce5aa9b448232a866c06e8dce3a79e665e45df9b6362f064f158728560fc599c966d54db0d2ed97c7664

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ4:0UzeyQMS4DqodCnoe+iitjWww0

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b82ada100c0e105dd5d04b905d64ec3d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections