General

  • Target

    d99cacfb4db90c3b3bc722320df976b1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    d99cacfb4db90c3b3bc722320df976b1

  • SHA1

    2c013a77e34db8ce78e860a1c587313115fafb86

  • SHA256

    ab24251d5b7f51b95d8f3f9be9df0ba11b9170a41f0ef40fd69a462a6160612c

  • SHA512

    32efc0a82f8bc3488c380eb679f519ad43167ae9de8ae8bd0dc0b1fc3b42604fcadcb4d8e4e86fd8c6bf76e4cb9f7e8251d598086d9005c451c1c0c703a3b2c7

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZU:0UzeyQMS4DqodCnoe+iitjWwwg

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d99cacfb4db90c3b3bc722320df976b1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections