General

  • Target

    cb6e06d0c117d0e35b792d21d8996f91_JaffaCakes118

  • Size

    2.2MB

  • MD5

    cb6e06d0c117d0e35b792d21d8996f91

  • SHA1

    3bf1e3daad9d961e11a719197265b1bb1e39aebe

  • SHA256

    87e88446d5e869139b7554ddde05e09aaf6696991ff0410b288534d41460433d

  • SHA512

    78e2c59d3998fe2e5403e119dbc13e9afc724cc18b5fcd36331cf2a452c7bfa9d63f7ccd31d3c84188509df41dba02e77e7e1b0ef1ac109898ab61e70afdd2cf

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZh:0UzeyQMS4DqodCnoe+iitjWww9

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb6e06d0c117d0e35b792d21d8996f91_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections