General

  • Target

    bd97b5c1e62cc5de2c2b41f5b76f8699_JaffaCakes118

  • Size

    2.6MB

  • MD5

    bd97b5c1e62cc5de2c2b41f5b76f8699

  • SHA1

    e69c24d0d882270837cb86bcece93fbe8ea285d9

  • SHA256

    86ed12a93c9d0dd398148a57ad54121a27f2be34d399371bdb9bc415a156382d

  • SHA512

    120f8ac1aa3bfe1df90716fdc223bb3a83e28c58375fbec84116e0ac2c85b093c65613cf444bf125561983a0e39970753c6df9a582ee9134227ebfa0dcaca7c4

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrli:86SIROiFJiwp0xlrli

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bd97b5c1e62cc5de2c2b41f5b76f8699_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections