General

  • Target

    cc28d0453eb3b7a582de6938a39f5886_JaffaCakes118

  • Size

    2.2MB

  • MD5

    cc28d0453eb3b7a582de6938a39f5886

  • SHA1

    7fb87a6178e71ba95aac70a519746c0568a3ea5c

  • SHA256

    dfd02ad66bc3ec78c1401cde728082474a70f37c4be33649cdd4831cd67a75cf

  • SHA512

    d1935c276e7ee34d48eae5e913c8e307a4b0ded522370501a6be69aef75604bd3122ebf04899033379c8b9df418d8b70ee4005a7376ba6b9cdcffac0efddd5ff

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZk:0UzeyQMS4DqodCnoe+iitjWwwI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc28d0453eb3b7a582de6938a39f5886_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections