General

  • Target

    abf1b9bf2ea841b5d77b1b72fcd3aa24_JaffaCakes118

  • Size

    2.2MB

  • MD5

    abf1b9bf2ea841b5d77b1b72fcd3aa24

  • SHA1

    20fd18e8904ce417f2a108295015b24920216caa

  • SHA256

    5d6b43cadd51d6972b9a7bfef446a7b96280da9f17cb0de97a26a66d2f8dea79

  • SHA512

    9b51b63d4fb8ac9cc5ef27b5bd6705274eef5bafab1e02189059a256a3f7b88749023d94762abd46d9d226576e03b4837b555fc5e0b64ec07ed49d65dacc2818

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZa:0UzeyQMS4DqodCnoe+iitjWww+

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • abf1b9bf2ea841b5d77b1b72fcd3aa24_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections