General

  • Target

    bd88a441aa66e7d4552dc92358bf420d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bd88a441aa66e7d4552dc92358bf420d

  • SHA1

    34a2c3d01af53d5f74f66283771ebda9634be190

  • SHA256

    ecec6bf504fdff863c38ac64c3823e753f7e9b0a91b173cdd79c568d145c66b1

  • SHA512

    a0474bacffc37a4381d2e64bcc6d0b1d2cc7436fc88060f091b533e1407aaa9901b058d37f67846e8db6d4a3fd24c836e421ce4bac7cb9c9acde6427240afbef

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZI:0UzeyQMS4DqodCnoe+iitjWwwU

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bd88a441aa66e7d4552dc92358bf420d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections