General

  • Target

    a44dba17152994755c3f3ed2c014105e_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a44dba17152994755c3f3ed2c014105e

  • SHA1

    cd969538d2b10cf7c4defccbb7c0576f717714f6

  • SHA256

    fb26dd78404f64108c8431659bd839f83e65deb71f67f87eb345f6ad0800eafc

  • SHA512

    36d8cc7a662efe46bc408b03d4f185bc20f3668d856762c648a449d9d69b6c0d5288b26d2fb9209c20dba569db5bdf61c1a505b2084ddc8dde71da7a381c9289

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZJ:0UzeyQMS4DqodCnoe+iitjWwwl

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a44dba17152994755c3f3ed2c014105e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections