General

  • Target

    a7230072c741c525eeb68392c5707213_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a7230072c741c525eeb68392c5707213

  • SHA1

    c74b94891ebc8a68978e1cf1d04bf74becf94e33

  • SHA256

    8ff652be80d43db8f54b2c7d8deb1cb81ee9ba00c6ca61ee3db8e6ee86cb243d

  • SHA512

    c681ffb3f2aac1f566c4b53a4c73be953a9495ba77a131d0a0cfbee52010b692b6dd6033dd96d979407d1936154590ac24887be147bf050b0ff18d91ec43c199

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ2:0UzeyQMS4DqodCnoe+iitjWww6

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a7230072c741c525eeb68392c5707213_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections