General

  • Target

    a57a26a9a1d52e796066f73f449d0ce5_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a57a26a9a1d52e796066f73f449d0ce5

  • SHA1

    0c087040ef9c6ac93f90bd56fa9b522addbf4081

  • SHA256

    ec3dbc57c08f5694b0173bc9b54a934731b566e4c65c1374f5fc7f89cbfb0ab1

  • SHA512

    1897e506e3594f05f4aaf20221b34d8a260baa6b6415c23952c90dd899ae544f87f7e1eaee3f0e9e0261e804407bb69ef053dcbde50bc0e39e41b5660c904fb0

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZf:0UzeyQMS4DqodCnoe+iitjWwwb

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a57a26a9a1d52e796066f73f449d0ce5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections