General

  • Target

    a22ec5946664665c44f03604147077e4_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a22ec5946664665c44f03604147077e4

  • SHA1

    3d24426a34bde7751a48434d630d961f03564803

  • SHA256

    6ee79b91d3ed3335369ece69e6ccbc56fa839d1894bab9414e1f9d7ed674c182

  • SHA512

    85e1b383a103be83c2bcd4ba86ee51300d09427a3d01f1b087957ebb3610cb86ef5bbc256cf1a5169dbc3b6578b07a0581b981b67fc1409044aa4daf1a4eb38c

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlN:86SIROiFJiwp0xlrlN

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a22ec5946664665c44f03604147077e4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections