General

  • Target

    0aefeba4563a362ca0aeec8950da8e19_JaffaCakes118

  • Size

    2.2MB

  • MD5

    0aefeba4563a362ca0aeec8950da8e19

  • SHA1

    8dd77505458ea7eaf53b8422310a915a2121391d

  • SHA256

    e6ac6a0672c5298febd5f76a2513933678d7bb08c9269626963246d3914d3b84

  • SHA512

    250a0d5b3e4d36efbd6a276ad37ea2af2640f87cdce4202fb23af543d3ac5759660aac1cd4423e75fd220f66c94e2769db1fdfe30acebb922a69f0cce69ef709

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZS:0UzeyQMS4DqodCnoe+iitjWwwe

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0aefeba4563a362ca0aeec8950da8e19_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections