General

  • Target

    daa55e314d97a213c507cbb05fbf1a4c_JaffaCakes118

  • Size

    2.6MB

  • MD5

    daa55e314d97a213c507cbb05fbf1a4c

  • SHA1

    9c5be0823fcdb864c067cbf9284ebf3ad5b131f7

  • SHA256

    2022b5f642bc4e46c9fdbd4093f550cbe4c4de40dc82ff9497c23b58da3372e8

  • SHA512

    1e5c9ce5f1151b3f89f18640fcad6ae5078df8fdd66fb187928aa8e477e1260327cf807347a33661c1aff2ed8f534529f9e5033aa66253e5d905664b6b2a923a

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlg:86SIROiFJiwp0xlrlg

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • daa55e314d97a213c507cbb05fbf1a4c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections