General

  • Target

    bd9ee3ba65db2eb79373f02290616165_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bd9ee3ba65db2eb79373f02290616165

  • SHA1

    b5183f3928f839a5a57d214c68f878ac490abc23

  • SHA256

    e79d79bc8509d221e0793a28c873be0dce01fe4609eab926b86c3b1209deb1f9

  • SHA512

    bc6dd7cb743cecc60202d41605c68999a9786cc57547c2c9a311a4e1eb8078180efebbca7f4352749dc8dc9adce736b87b672a807b02f3f2ce9af5ed89e0ee16

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZM:0UzeyQMS4DqodCnoe+iitjWwwA

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bd9ee3ba65db2eb79373f02290616165_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections