General

  • Target

    abc6ac0c16242d9a94ded5655408c815_JaffaCakes118

  • Size

    2.2MB

  • MD5

    abc6ac0c16242d9a94ded5655408c815

  • SHA1

    33460199257f02d261b95a8dfacee8afc5dd4746

  • SHA256

    d02ec87c55f5827e2716f6e5bb2f09ebbcf3b6a66024b910b6e78457fc22b688

  • SHA512

    422abdf070960771b75279f2c4de684e7471e037fd9b106b4b40256c56475320fc17ccb519cec8ce92660e5241f3c98931cbf41f63f6c1be1ab3f8f037fbd0f5

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZy:0UzeyQMS4DqodCnoe+iitjWwwG

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • abc6ac0c16242d9a94ded5655408c815_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections