General

  • Target

    a4c1abcaea6a8c51598e75c87547d86d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a4c1abcaea6a8c51598e75c87547d86d

  • SHA1

    fad409ad6457a3fd01dac70a61ed032899edee70

  • SHA256

    4cdc8094d79283e423d9c158f2c5cd3525208ff619856be84cc8ae442819d4e0

  • SHA512

    dab77e4c14992ba61320dba8a6195d44fadb9748c27a704944427dd4012c247ef328e7c5a2cff7ee8fa8ab08a3a1a7a2bc265ff668feefc4895985bb8dd8a7c4

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ6:0UzeyQMS4DqodCnoe+iitjWwwe

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4c1abcaea6a8c51598e75c87547d86d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections