General

  • Target

    0a004ebf3f71c34b5c42e6d64b47f1e7_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0a004ebf3f71c34b5c42e6d64b47f1e7

  • SHA1

    c94ac27820b935aed7dfd6409a39307bcda7e2a6

  • SHA256

    0b689a6e9f94e8d4ed14812d1887ab5aeb6adaa191a92de212125c5565b93d84

  • SHA512

    fba5b4ab9a08a621552cf54dde2c25bde9a035cfafa23ad31a0bc7646107f196fe6820cf4e296d5ecb30288b634a6830278449a048b6626f63595f06a1602c74

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZN:0UzeyQMS4DqodCnoe+iitjWww5

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a004ebf3f71c34b5c42e6d64b47f1e7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections