General

  • Target

    08df30db419da5ee7885cb32deeb3326_JaffaCakes118

  • Size

    2.2MB

  • MD5

    08df30db419da5ee7885cb32deeb3326

  • SHA1

    e9afca64e4112452d7f76cb43d8b627016278d0e

  • SHA256

    56ff9465c0b24e7e6bdb1ed4db47e168c07bc3aa3e6eaa20f4536bc4cfeafeef

  • SHA512

    6d31b35711f426b2231ce8433bfdc1169f8dd8595a946f1a8fd9949a4b522f710c33d4bfd4b6aa98c37e4814725fb21f988e93859bb9d49ed8edf8d0d19a60ec

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZm:0UzeyQMS4DqodCnoe+iitjWwwK

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08df30db419da5ee7885cb32deeb3326_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections