General

  • Target

    a422a1dbf46cc536437ccf107236bc24_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a422a1dbf46cc536437ccf107236bc24

  • SHA1

    7439ee86a0c16931f13df440f83d1709f98af0de

  • SHA256

    de3f7bd2d8d7abe8f4aed318f15cb8d317424bb35a6f1861e9f57a3139ce83d8

  • SHA512

    2e6f720199fd7fd7808d1d319f4bdbf44c89efb4a8d1488b377e23c9615a087fcedded0215954ee917af4fb8de2d40c11249c72e7f65bc31ccdde5a2b3568a72

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlo:86SIROiFJiwp0xlrlo

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a422a1dbf46cc536437ccf107236bc24_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections