General

  • Target

    bfae3c11f3316994733b259f5972d3f2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bfae3c11f3316994733b259f5972d3f2

  • SHA1

    071d00958baca53917418e088b5668721bc7c0cd

  • SHA256

    2dfda25a6bd384bf5ea2e634e51423ea271bd2753358d1eabf3cb837ecb40dda

  • SHA512

    9896ccdbe08f123d67b6496459d74fdb8489895335689dd1846fce1706ce7f214c6dcbf0f4a7dbb5730dcfa7c13d7b067bd257a94767fa609e53ef7cd9752f76

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZQ:0UzeyQMS4DqodCnoe+iitjWwwU

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bfae3c11f3316994733b259f5972d3f2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections