General

  • Target

    a06492990431c2fe36f08f3c0ed27608_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a06492990431c2fe36f08f3c0ed27608

  • SHA1

    825d96a17c67da489b28bfa4d94c54d0d9daf927

  • SHA256

    76de626c5c3dff0ad104890393d15098828afd434d6363356b1b63b2fde54427

  • SHA512

    0f227f120ae3a6b849a018b8e209c3747b1ad403cb72ab7354655f20d6bc9834ee8cddc65b9f08967726ed38e8f0b414439f26146475473e44454b799a062a58

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ0:0UzeyQMS4DqodCnoe+iitjWwwo

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a06492990431c2fe36f08f3c0ed27608_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections