General

  • Target

    4ae00ecd5dd1ae3132da822189f752db_JaffaCakes118

  • Size

    2.6MB

  • MD5

    4ae00ecd5dd1ae3132da822189f752db

  • SHA1

    0561e5a535bda38725a026494a9affa1d54e6f5a

  • SHA256

    94904c63a6802c87485e533d7ac35aaedfa25707220ad8feddacd869611073e7

  • SHA512

    60728c8094dcdffaefc9fed5cc20bc5ca3419561644f16abaacc8b43284d9258169cfff76a7e8100c77f40d2bb071073a68eef00ad79e46f95ed40fe1e858c39

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlh:86SIROiFJiwp0xlrlh

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ae00ecd5dd1ae3132da822189f752db_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections