General

  • Target

    c0a46118eb18bab2e5f1085f91f90f32_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c0a46118eb18bab2e5f1085f91f90f32

  • SHA1

    f51997b60e0358c53e2003774870f6ef7d2136c3

  • SHA256

    ed7cfdccc60f33f692253af258e79a38b3631944552a7c4c69dcf85127a69f3b

  • SHA512

    a3b7d21d50bd678b0d7c28d2a702a4625e607e3fa082b1ccd84723b93db7dc53e78c8856d85cd44f9da6b3ee36380c0c47dda5aa6da3927c2beee6b12fd97745

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZD:0UzeyQMS4DqodCnoe+iitjWww3

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0a46118eb18bab2e5f1085f91f90f32_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections