General

  • Target

    bdd9e0b18b6130003ff3b9ecc2a98bd0_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bdd9e0b18b6130003ff3b9ecc2a98bd0

  • SHA1

    43c577b62de8fdaee99bb1ec225a41002122db96

  • SHA256

    df9ce9b406cdaa78c6e5c066c2dd25bac6b074d19c8bec62b4c76d02fdc2ca3c

  • SHA512

    f4b1243743b4f1b6b009c9298d7ac9c0c25ac6b82209de5a7e4872e0cfcd1ea361b34ffc3e8cd24595df84eaea45ad6e40d437f3e4e427b7dc14f47528d90720

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZp:0UzeyQMS4DqodCnoe+iitjWwwt

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bdd9e0b18b6130003ff3b9ecc2a98bd0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections