General

  • Target

    a2dfdcd9fba22b22db2ad006e0168aa8_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a2dfdcd9fba22b22db2ad006e0168aa8

  • SHA1

    10786f1c867515bcb6043038ed2bbfd360be37af

  • SHA256

    ba35510d12c94cad9743db170c5fe9a4d6b977a78e6537a5da685921c46df389

  • SHA512

    8e1f23d5d2987ea07e4a518dbf7e29ae0f557f27fdda41fafd5e8e4a43f00d0b61da9daf0d01ce11a97c6282d33bbcbbd46abc764580d89f64494386ede80ac3

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlb:86SIROiFJiwp0xlrlb

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a2dfdcd9fba22b22db2ad006e0168aa8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections