General

  • Target

    fc9b15daca8bf222852c5a9366b8e208_JaffaCakes118

  • Size

    2.2MB

  • MD5

    fc9b15daca8bf222852c5a9366b8e208

  • SHA1

    d71759fd2f967103297527c07ead8ed4e6618751

  • SHA256

    2c3772b83ecf111855245377076fcb965643a1b1f324152f9762fabdc502e9b1

  • SHA512

    46417a761ed8400e8dbfe00a61af057849d9665fee09056ccf0f9e0ad6bf057b8deab69f63bfdaea472a2264bb79bd3b16e5452592e72537900e9412b9b400d8

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZk:0UzeyQMS4DqodCnoe+iitjWwwI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fc9b15daca8bf222852c5a9366b8e208_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections