General

  • Target

    b875dfc8930474db66dcd7586b22b651_JaffaCakes118

  • Size

    2.2MB

  • MD5

    b875dfc8930474db66dcd7586b22b651

  • SHA1

    7c311f38282b2a2a3864d33cd768b23720ab9c7f

  • SHA256

    af6e5f80ad608b98fc7eacea0729073e42b01558621b9f1d855224da4b181ff1

  • SHA512

    b068fb2951194f82d9ab938d8bcc281bb6fc9da4c33e59c3c74aa6dea66d556106b38fb3a9524518a1ac11eb541f989dd6c31874ac890167f4126cd561100598

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZx:0UzeyQMS4DqodCnoe+iitjWwwl

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b875dfc8930474db66dcd7586b22b651_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections