General

  • Target

    2a2cb9092744082c4efcac2cd612ceef_JaffaCakes118

  • Size

    2.6MB

  • MD5

    2a2cb9092744082c4efcac2cd612ceef

  • SHA1

    fc1127aacd0c44493dec7af516d02591683b7ad0

  • SHA256

    c1ea17ae444d10fe5cb1f99da5cd4f3bd883f2ee544830f1c022e73293e6a4f3

  • SHA512

    39cc07acc0e8f07176d1bd8e9138a6f4c594fc554796b244acfdf05b5e2f8730b6d850092892df9d8928a75d8fa273ef16cb79315135fdbdd151c0d00bb459b2

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlw:86SIROiFJiwp0xlrlw

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a2cb9092744082c4efcac2cd612ceef_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections