General

  • Target

    c7644cd02b4cf93262317379035a1f53_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c7644cd02b4cf93262317379035a1f53

  • SHA1

    240b454a0077c58a4b9a5832b17125f8e3fe1de3

  • SHA256

    15a375de7bb6993d3c044bbb64867850be4e02ec8e02c6ec0ed2a9cdbd5e7ee7

  • SHA512

    e853e0543f1a7a87a562ae55fe8f5067811acad96ff863e8bafcc10d2d29dfbb8939b68f6983f925b091efe9550807f68ccaafe6270a218ca3cdc3661d3e8428

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZm:0UzeyQMS4DqodCnoe+iitjWwwa

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c7644cd02b4cf93262317379035a1f53_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections