General

  • Target

    bf93406db7ebebc3d4121d43c1e74720_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bf93406db7ebebc3d4121d43c1e74720

  • SHA1

    bc1b0b20618e101e8acb158939e1df02f3be8bfd

  • SHA256

    a966aa9e1021935ec0209ca18115345225b336943943392b9195bf4a39dc06ea

  • SHA512

    cf71882b0fb6c30c3e950090bae3db8f2e0c2f320129face4e71ee9eed02c9d705ac6ee0850dd6644291584e2c950edc0dcaba07b048be8ce5a1b8574886bb11

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZl:0UzeyQMS4DqodCnoe+iitjWwwB

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bf93406db7ebebc3d4121d43c1e74720_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections