General

  • Target

    bdf0b79f1e581f5e9ff190703df061b1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    bdf0b79f1e581f5e9ff190703df061b1

  • SHA1

    b9ed3c25d3f1e00ab0e9230918d37062a9a9bf70

  • SHA256

    93ce7ae52db00acc3dba1e0e77c76e247525133d0cf4f20571b3585fdb6d2982

  • SHA512

    c83227fb3f19123e7a5a457774a3efeeb6d6e38c58dd8de210ccb3158f8113014f97e1fb05e41ca1b176d735fda4036353ade9357cc71e12c36d7a419d9e703e

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZq:0UzeyQMS4DqodCnoe+iitjWwwm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bdf0b79f1e581f5e9ff190703df061b1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections