General

  • Target

    a2c90426d9197b5acf4df0203c4d7b10_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a2c90426d9197b5acf4df0203c4d7b10

  • SHA1

    63495ac3dd436ddf00ae469322a0fdbfdc711cdf

  • SHA256

    f3a0a9c709d55d0de14917794ac379220282cb642924d613f027552e2d5d114f

  • SHA512

    b38faddfcaa470bbff72276ecca6a1deb83c5dfa5f02f0e0c4c1f30e51318a26118ade178f514a80b36d71889b659415c316c5cd0de10b9262e386cd92035337

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ2:0UzeyQMS4DqodCnoe+iitjWwwq

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a2c90426d9197b5acf4df0203c4d7b10_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections