General

  • Target

    06eaa9bac29abd60207d90ae93bb4f5a_JaffaCakes118

  • Size

    2.2MB

  • MD5

    06eaa9bac29abd60207d90ae93bb4f5a

  • SHA1

    94a2e24646d27412bf24c15870fbf656232f111e

  • SHA256

    26fdf1fe3cf3832c0ac96626288ed4a6bee3b80e5ee9161a0c26198e1135e128

  • SHA512

    e5ec457d67f776dcc8f84ad9c3038e092740b7b719ca673589aa6b04b2c87828fd906625e7c3e895abf96e15782adc1a53cbf7bacfd4c98bd18c6e067db23eaa

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZD:0UzeyQMS4DqodCnoe+iitjWwwf

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 06eaa9bac29abd60207d90ae93bb4f5a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections