General

  • Target

    abe2f7705d63d6b4d3cb1aa18ed51520_JaffaCakes118

  • Size

    2.2MB

  • MD5

    abe2f7705d63d6b4d3cb1aa18ed51520

  • SHA1

    c38360978d800e10041e55f4e741d8880e02926e

  • SHA256

    cd9b5f51255dbb2232cf1d7ad4bdf17676513c631cf9c170a06efd88eefacff7

  • SHA512

    63d79b49a46ee7578afed33b04d657eef4af22035c049ce3cf8f3f0bdb42dafbf84cb1fe01fa584bc9a62718e33e416af1b830e79e7aa56e3603a585ef0aa054

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZz:0UzeyQMS4DqodCnoe+iitjWwwf

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • abe2f7705d63d6b4d3cb1aa18ed51520_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections