General

  • Target

    abf3d94f73d0ae4402c412e70f3b06dd_JaffaCakes118

  • Size

    2.2MB

  • MD5

    abf3d94f73d0ae4402c412e70f3b06dd

  • SHA1

    820fd705e78df344e93ab859669fa1b3f48f8d7c

  • SHA256

    8fa119b12d9c1d6e577812be84b1946161b63235ee300ab180ec4bfdc5b33c0a

  • SHA512

    582013e3d9967e9bdca4144c2a6de03b5a0bd2788d576db44f6b848be2306660cdc26759e31c64719a7f721313363a7a904fa7639b765691991490dcf74265b5

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ2:0UzeyQMS4DqodCnoe+iitjWwwS

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • abf3d94f73d0ae4402c412e70f3b06dd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections