General

  • Target

    a4e7105f881f4a9ea122f8d7723454ae_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a4e7105f881f4a9ea122f8d7723454ae

  • SHA1

    9fb9e33d56c8688b4e29117a9167335dada2e17a

  • SHA256

    ba53dfea52d90bb51899e4b7c95a36924de90299179b6c8a44a54b1dca93717c

  • SHA512

    c812a4848a4a9515dc2ba0b6d14c12a350a52793323c35c9bca4b94d6941b744e781a160105e4b47a51dda3b5cdeae14f57f8447f49f453a1053516cd0f44b67

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZM:0UzeyQMS4DqodCnoe+iitjWwwo

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4e7105f881f4a9ea122f8d7723454ae_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections