General

  • Target

    bfaef1230a5369bf1a89c1587d466956_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bfaef1230a5369bf1a89c1587d466956

  • SHA1

    f9a63d101f207fe4fbd408a33db303d4f86bdb8e

  • SHA256

    c85f1086258058f0155c7ac43871c3e33301d183571a088bb87b11694a4ee9aa

  • SHA512

    dbf43782ed0fc6f04b88a93b09fcf028e8aa0a5ef19002722ca4c7787957fbc3302b92e0cb874f6f6d37cb40e0349e1e123142a31446b663261a8e0451afbaf2

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZG:0UzeyQMS4DqodCnoe+iitjWwwa

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bfaef1230a5369bf1a89c1587d466956_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections