General

  • Target

    a5be0dc2d5106ca6484a732081631d71_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a5be0dc2d5106ca6484a732081631d71

  • SHA1

    8c3017032704892c411a292b932ec3dd93a970ee

  • SHA256

    b28fecd3596f083aac4d24efd0d80b830c52efe98bfcf09e56433b1b8ce837d5

  • SHA512

    f41e8a68383c5cab1775af3ebd807850b7ce47f11c811b438fb130cfd9d9d669ee3dbb63fa61787250edad71001d576922c0e2afad2016f5e29d3bd3e70a067c

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ3:0UzeyQMS4DqodCnoe+iitjWwwL

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a5be0dc2d5106ca6484a732081631d71_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections