General

  • Target

    9ae8131f19ca2566b9cde5c47109d1b7_JaffaCakes118

  • Size

    2.2MB

  • MD5

    9ae8131f19ca2566b9cde5c47109d1b7

  • SHA1

    7926db16b2829d79583856f3f2cb6998b607b572

  • SHA256

    20fef5065ff35eac5862ff889f1f6e38b6b8c676863d2f07a82b35f64f8c64e9

  • SHA512

    c8bd8a3fd06e303cdb65f5c4f12dd42664109eb427b3adbe4e3ddcb6be0f8d8d3907f8e6a314f186dff9fbe7bb4aca39f002fdbe80913f498b2d1d6a321e2257

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZu:0UzeyQMS4DqodCnoe+iitjWwwy

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ae8131f19ca2566b9cde5c47109d1b7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections