General

  • Target

    a7324419ab6cc26e8e1327894a6e948f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a7324419ab6cc26e8e1327894a6e948f

  • SHA1

    d2530fa82db6634ff751d0486e1a0e45da9ad9b6

  • SHA256

    ac6103f282dcd0e51b46e1a77b458dc64a95e7162356f63ac0fbf93fd14b0c45

  • SHA512

    340edf3bc2fd52928f2b438512a99725816777fdf140f70087bfc162bed7145ca613fcfb7f3d17ab88baa2a13a3099153c80952e9e5a22b65665be7bffe829a9

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZh:0UzeyQMS4DqodCnoe+iitjWwwN

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a7324419ab6cc26e8e1327894a6e948f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections