General

  • Target

    a4fb685ead51b444542c908314ac7d5b_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a4fb685ead51b444542c908314ac7d5b

  • SHA1

    5446ef9ddd865fb6d02179688b8173548b0a8826

  • SHA256

    1e001cafaaae2284b6f90f8197ca9763c8ad98de69e664decac8c02fc659ce14

  • SHA512

    37874be07cf3e95cbf181e08212d2114d5c56d1575e5ec5befcf12098c2f09ac53f9a4b76a53d60e152c3d4c59cd303b8060e2397cdb3fccd7cf9a645fd002a4

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZS:0UzeyQMS4DqodCnoe+iitjWww+

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4fb685ead51b444542c908314ac7d5b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections