General

  • Target

    a8e06acabe7f61e9db3c9f9e0a48e7fa_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a8e06acabe7f61e9db3c9f9e0a48e7fa

  • SHA1

    1c4a964322feb932104422679c429a33de84cec4

  • SHA256

    d46cbfefed00a2825f8db007dc1d599e6104a4bb36b6fce8178e3a928fd90e19

  • SHA512

    0e4d86bbcf008786b036a6b882a8bddbfba247ab2bf04597e7f5662fd6182ae6aa160c401287bb4f39a0b94814cbb0df63eaf540d2860cb705220d8b58b450f9

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZW:0UzeyQMS4DqodCnoe+iitjWww6

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a8e06acabe7f61e9db3c9f9e0a48e7fa_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections