General

  • Target

    d0f2b54bf9ad45fb3f7fe2a3c17bee0f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    d0f2b54bf9ad45fb3f7fe2a3c17bee0f

  • SHA1

    5a1cc962359451e52cf882028e4598e83d96a89d

  • SHA256

    5e374dd7b37a3ba404d6b7669c639842a61ef105ddead181edd73cbff21c4f1f

  • SHA512

    3f218d4581f39b5eed57d9e485cc4d9417635a48a241af0a984358f40bfa933ddcba70a7bd3689aa1e8ed6ff51d5fbc1ac20a40dc9f9f7dddb5ffd5a25e6ed50

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZR:0UzeyQMS4DqodCnoe+iitjWwwV

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0f2b54bf9ad45fb3f7fe2a3c17bee0f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections