General

  • Target

    c1dd6105e9f9d02bd8023c8d66b20238_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c1dd6105e9f9d02bd8023c8d66b20238

  • SHA1

    7a2cde9914c58135398c1471846d2ff4cfea5ba3

  • SHA256

    42de9bdf19c6ea0f0ea1f44d9dd3f1ff6c641eb7666fbd5c672b66b8c6dba2e7

  • SHA512

    dcd45c7eca47c34fb7f8402d2c15b6d313ec1e0eb17b79b27ac31fe913f19416523402898ec109cd97677328c7bfd556b305db645a212b16b2d3de2dbe781c57

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZV:0UzeyQMS4DqodCnoe+iitjWwwh

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c1dd6105e9f9d02bd8023c8d66b20238_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections