General

  • Target

    a8b44a55c4a48712a9c5de95ec6282e1_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a8b44a55c4a48712a9c5de95ec6282e1

  • SHA1

    facaa95ade6cc5381a2bb542c6270bc497b449bb

  • SHA256

    7c998a007f77022eeb7dd00b9cdb385945ae74d90c0615949cdca565e00dec17

  • SHA512

    b9fb3ab33f0e2fa6d7b46cad28b25f3c76457537feb99bae95679674f84cd26c7bb86a9be5125d51d6309014dd5d4f231050b89be6980054355fa3fd8b431fa3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZw:0UzeyQMS4DqodCnoe+iitjWww0

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a8b44a55c4a48712a9c5de95ec6282e1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections