General

  • Target

    f82c5f3f44d5c37fa086f126bb44b21d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    f82c5f3f44d5c37fa086f126bb44b21d

  • SHA1

    88dc82e1fbbbba5fe83a3164d74d539742d2223c

  • SHA256

    0d6750d4a04fb7b1ebd355743a76fa9aa91cdb38c3121bd8e04d8c72f65e77a1

  • SHA512

    54866db5f142864af65f437585f64ab132f4e8cb9cb858a123744c76e91ba0fc51b6f91810ab22b5d9a3884945650fc94b43979982385b7e0a25f1768908c4c0

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZp:0UzeyQMS4DqodCnoe+iitjWwwF

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f82c5f3f44d5c37fa086f126bb44b21d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections