General

  • Target

    a7757f70acdd04544c81aba9448219b9_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a7757f70acdd04544c81aba9448219b9

  • SHA1

    818d68b8cafaf2cde34869f68f2161c853b33bf0

  • SHA256

    70492b9cce0725ce4689bb1148f79d3a24823c3b7420bce0a856de5dd47df59d

  • SHA512

    da80ef58859c7bd9aedd8e0685cac8daaddfba516c5b67230a653c74ef3f89448f64d83efa69ce0e3a3fc563b0ec92831a49c7e3a42f496c98e58e72736258fb

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZc:0UzeyQMS4DqodCnoe+iitjWwwI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a7757f70acdd04544c81aba9448219b9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections