General

  • Target

    a0a0e9c33e9ca091af46e6165565f972_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a0a0e9c33e9ca091af46e6165565f972

  • SHA1

    343306ffab39073bde6446d5f016ad95006d3503

  • SHA256

    2392b4d97d70da71be32abd123f1ece619754601fce7efdc54563c2431cfa175

  • SHA512

    c2093a59d335815f9e4fa8f952056393c06b353f8e4b902b869a0ca9a7b3220d8a0c13b1dba92ebd9103ebe39043a86524675a3a28977bebe2402dd5b1456a1c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZc:0UzeyQMS4DqodCnoe+iitjWwwA

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0a0e9c33e9ca091af46e6165565f972_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections