General

  • Target

    a3f3af7bd249f6cde9d66519722c71cb_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a3f3af7bd249f6cde9d66519722c71cb

  • SHA1

    f1157e9494d6cf15e81b90303b88ec28ea757233

  • SHA256

    a726629d4dae6dbb7c750f0d21f92803dbd3459293089e7fe933bbe3b5ac0590

  • SHA512

    a53d021aa1e0a1046da7c1451175e54b0d337e00e09486f2e2711b6ca65cccfa262f0282be70d63a8db7e277a780e116d793584650f88a670fda7f8e9ea531be

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZN:0UzeyQMS4DqodCnoe+iitjWwwR

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a3f3af7bd249f6cde9d66519722c71cb_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections