General

  • Target

    2aba8e18cdeec12c0d40d32512a3fa65_JaffaCakes118

  • Size

    2.6MB

  • MD5

    2aba8e18cdeec12c0d40d32512a3fa65

  • SHA1

    1e2381d47e8facd820c52f17cf8b1af0cb6d6933

  • SHA256

    3e8b7a4ca997004d043993d1d604b933bbb4bd3bfe9f349d7530fbe75e0a5529

  • SHA512

    b60e206ef25d6f00f0e5c2edec5af54e40d7dfbb92f79a1d90b3af8c391927c645ca194f7da726f5221540f38c18962d9336d65110fb23126e6ac8d1c3569bfb

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlv:86SIROiFJiwp0xlrlv

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2aba8e18cdeec12c0d40d32512a3fa65_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections