General

  • Target

    c203cd4a444c8f8aa854889e6dcc804e_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c203cd4a444c8f8aa854889e6dcc804e

  • SHA1

    b500ec0c8d4763c6968d6c970c7e9a45855993fb

  • SHA256

    b86b3f38b6acf0808e51e452eeb6585edf94b78e1b12a9c0731512240afa73b7

  • SHA512

    825b042d87dfc943cb598c1557587ecead4160a5bb5c1237c4161acec8d65c15f42ea537de06b9f9eef3e072b72e6a579ad4f62fc25f299b3b008ecbadbf4699

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZV:0UzeyQMS4DqodCnoe+iitjWwwZ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c203cd4a444c8f8aa854889e6dcc804e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections