General

  • Target

    a241e59c15bf0e4549feadefa4f7bf49_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a241e59c15bf0e4549feadefa4f7bf49

  • SHA1

    bac6015e603dfc73e730703292d673cf0ad8905e

  • SHA256

    1ef309b61305b48fe8a20af6e737da57089c704a75ae4bcfab6c146ccfaca49c

  • SHA512

    58a2b63dac4858be1986348c088c5d6a8b09b855ce1c0a6bbbb15133005f103f87f7ee584348f6b219c60d85180b4e9c3e91ba1ebfc1daa553cf148b08222133

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZT:0UzeyQMS4DqodCnoe+iitjWwwH

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a241e59c15bf0e4549feadefa4f7bf49_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections