General

  • Target

    c24fe7fcd3a954192d2ad2f736410233_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c24fe7fcd3a954192d2ad2f736410233

  • SHA1

    bdb3a0ee32aa319280ab0736242ce4ef499d1c11

  • SHA256

    d80537a8835a33668843f5ea0a8c60e44be95b61ccb5080436992beedf4a5dfd

  • SHA512

    c0bb1a7718073028bc6154e8be5e801b1b64fb365bba3ba057d605653603f1f0d498c4cc605db6423887403028fe4648263820345d2254b02242209ea60bca9e

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ6:0UzeyQMS4DqodCnoe+iitjWwwe

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c24fe7fcd3a954192d2ad2f736410233_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections