General

  • Target

    a4efdbab3dd4d32477355ba45fadb29c_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a4efdbab3dd4d32477355ba45fadb29c

  • SHA1

    32ba9030279c22d37f2e04b39e4a7a88ad113a9a

  • SHA256

    a099c9b768ab1bcec8178ff88e6898ca3b0305a13fbb1acba72a48329709017a

  • SHA512

    6a23670eed0afca7a3780c499426b5d60710e199407ed63b553e9a2fd39b014c1f380cde8e5cd7af8ba6e2cbdf741413f1cf2fda9238a94b92872a5ebb0e7fba

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ4:0UzeyQMS4DqodCnoe+iitjWwwk

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a4efdbab3dd4d32477355ba45fadb29c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections