General

  • Target

    a8f418a721f272ef9b433302795a4270_JaffaCakes118

  • Size

    2.2MB

  • MD5

    a8f418a721f272ef9b433302795a4270

  • SHA1

    e4aaeca93b6e140818b22d5090ce8d3d47b7700b

  • SHA256

    8a890299aeceb10eca967274cee761c743adccf0f75a2b5057bbf78e450960cc

  • SHA512

    9c7c586e30806c49208ef85a94f165e63a5426d38883b4b67c47ca1812fbf5e799c14cdf66bdd922643ee122965b7044c10397527df4f49fc1efc2583b61d436

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZs:0UzeyQMS4DqodCnoe+iitjWwww

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a8f418a721f272ef9b433302795a4270_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections