General

  • Target

    a8ceb73ed31c4c1e86a0633bdd9876fd_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a8ceb73ed31c4c1e86a0633bdd9876fd

  • SHA1

    355e9451770e205c80397eb13f6654a64d5cf4ee

  • SHA256

    628e74babf93051bd5ce578bb2fbf42a86c3f9df76fe71041db3e16e279f7546

  • SHA512

    4394fa5f6fea9907e86204b3038996f23b4a6d74dd4a089180e3c64703d74f9f4ce51c97c91ab04dc6780e6e82ad6122a969c50a5123727f88a26bcb006accad

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlI:86SIROiFJiwp0xlrlI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a8ceb73ed31c4c1e86a0633bdd9876fd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections