General

  • Target

    0ae3c4cc68d56215a9e5b061d170c0bd_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0ae3c4cc68d56215a9e5b061d170c0bd

  • SHA1

    9415ecff02a193ddfb54dc0b819c73f56e40cc09

  • SHA256

    b6996942713a666501d792424c900b40fbf67238d67d90cdec2c2d0adebe120e

  • SHA512

    120359aca15082a28457e1f9824ae8487275eea2e2df6c2d360a8793cca04d61b98015bbb77ae339a6a1fca5097cfcaf27ef4d20340501aa336c87faa10a8413

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ6:0UzeyQMS4DqodCnoe+iitjWwwG

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ae3c4cc68d56215a9e5b061d170c0bd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections