General

  • Target

    c0489706566768a1b87d32503160a668_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c0489706566768a1b87d32503160a668

  • SHA1

    4ebc766bac07ef9db1e1e5022ccac4346199175d

  • SHA256

    7561ccea54c4a14f86c46670f3c7a6f762bbea20626cfa63d2076693ed14dbdf

  • SHA512

    22da6a4ea0d141ce3bd868f79b5e57319b1439b23ec5d80fb2af06e5325b1978b9d9a10e989966981989c1151b1fc195bf07f2db38b0fcbe211e1e7f3c515052

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZH:0UzeyQMS4DqodCnoe+iitjWwwj

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0489706566768a1b87d32503160a668_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections