General

  • Target

    be46b69d0bbefa32c81623e39335f660_JaffaCakes118

  • Size

    2.2MB

  • MD5

    be46b69d0bbefa32c81623e39335f660

  • SHA1

    b236e482d3f7a1b1b3eafffe989f93504e2c207b

  • SHA256

    5f937a1967c2e223fb5da9c8e6241b8e27cca2b2eeb6e8e6d9385d5da7bb1375

  • SHA512

    7a529b939817cbba8a11f804d89507e1eede8c51155009ccd0754ba0a5b2154daa8c2671e8a98356e6756dfe6035e4be2bfe5894c7f6b27f27c30794241e749a

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZI:0UzeyQMS4DqodCnoe+iitjWww8

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be46b69d0bbefa32c81623e39335f660_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections