General

  • Target

    aa45e49577f7e52036aa3c394634059d_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa45e49577f7e52036aa3c394634059d

  • SHA1

    8ed68a81c7964e92cc2528c16495c4006cf77b1f

  • SHA256

    17bb5af2b7f78a515a10e128a233d0dcad3160ba2b9733d44d11d07041c0fc90

  • SHA512

    de58633500cc76a1138de7c961798a1b37420f0bbbde4a1abe8815980c43bba9d55f3fe67efba06d8263f0ccd8c51fa3cebc900c1b06db80bd6484654bb676d9

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZH:0UzeyQMS4DqodCnoe+iitjWwwL

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa45e49577f7e52036aa3c394634059d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections