General

  • Target

    c84ef5e98b5a2c655f78482644aa1dcc_JaffaCakes118

  • Size

    2.2MB

  • MD5

    c84ef5e98b5a2c655f78482644aa1dcc

  • SHA1

    35e63b877bc49e48fa11fba0b1e27a253cb43de2

  • SHA256

    56e1ef0dd1b9e0184a0156083c23684d9ec5e2982d1095488c57e17831cf3568

  • SHA512

    4209022b0956c0770fdc15dac2eaef865e2af3b4a29dbcdfe1fa4845949570123498ad12510346f3bb885630b15ff2d446a0d8cafdd3133e2c69dd62b318b096

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZY:0UzeyQMS4DqodCnoe+iitjWwwM

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c84ef5e98b5a2c655f78482644aa1dcc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections