General

  • Target

    a8ba6f7d811802e8f2ec6e4c43b140c8_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a8ba6f7d811802e8f2ec6e4c43b140c8

  • SHA1

    2a3a8af881018dd70fa19b446ac49f0dcf5db4eb

  • SHA256

    1f00a47860044b8693e60f503ca683c55c3d6110b4ae22133644179ffcf67a85

  • SHA512

    f792c31bcf2a6f5ca67137997b79d6946a43c235ecf8887d08e25e420ea22fca285c6931d30650d258c970fd962ab5c779c99690d8d9e21143b26e93aba419bb

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZZ:0UzeyQMS4DqodCnoe+iitjWwwF

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a8ba6f7d811802e8f2ec6e4c43b140c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections