General

  • Target

    2a22ae6565473c74622a66c38a454a87_JaffaCakes118

  • Size

    2.2MB

  • MD5

    2a22ae6565473c74622a66c38a454a87

  • SHA1

    1f45f4946563c8eb96adb7b2c9a5772c02778a90

  • SHA256

    533edaf55c3705552194c3f852538d964e49e863c929810df0d94aaded70adcb

  • SHA512

    544ccd7d50d57b2a299d17276d6976114ca175333b2cf7d9e9afb66d811b0a3d12c349e382a41818fd8ac17c65fa4a5cfedcd8e8c865376700eb567879e4f1ee

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZN:0UzeyQMS4DqodCnoe+iitjWwwZ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a22ae6565473c74622a66c38a454a87_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections