General

  • Target

    a4ca455d1019672a4edfa0b1bdbeefb3_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a4ca455d1019672a4edfa0b1bdbeefb3

  • SHA1

    c95bd6865ff74213c33a8194f3c8c5eabdb0f8ff

  • SHA256

    2ba9068f59ddd2531e5093b4601058e116fbbe7c5bf14aaba69ccd124b183d60

  • SHA512

    0fd1b60eeea9f3d03940399a44c9a9fdf620cea9254f8dd7787713067da00b2da7d35437099b8b33cc05e51d1d7b9d8ed588de80bfbb8e0285016de04668a2f8

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlq:86SIROiFJiwp0xlrlq

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4ca455d1019672a4edfa0b1bdbeefb3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections