General

  • Target

    a89b525f6718302e5c9b37dc32ba6cfa_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a89b525f6718302e5c9b37dc32ba6cfa

  • SHA1

    f523df3371a5af17667a7679801f2b54539a5a52

  • SHA256

    caf655bb9e9b504f8f18fd6a52710c5510e7baec78b7b43b54a9d7e064cd6da4

  • SHA512

    41724e4045cecc3314e7edcba0d282d5f343fbb6f3ceccdf8d50a72cd5dfb9663a35840579f2967aa1537bc38492dc711c06e099c318611a0811d59c6f9f22db

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZS:0UzeyQMS4DqodCnoe+iitjWwwm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a89b525f6718302e5c9b37dc32ba6cfa_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections