General

  • Target

    aa210fc9cfdaf2f78bedc1fff8f04aea_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa210fc9cfdaf2f78bedc1fff8f04aea

  • SHA1

    6b0b4d38d65c1f3a15c3315f36e520dd89ce6d9c

  • SHA256

    b40800e7c99ce572d9d5c4b516a57bfeef4c1b452deab7aeba38e963b94a1d3b

  • SHA512

    33e2675566c823f86d5fdf0ff2ac4e1ad4bef80b633a43b3fd385e1ddce54d88b3dac843761bd77de3b2f277e2203c52d06a2d1c1de8d21748c2987087dfdbb8

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZe:0UzeyQMS4DqodCnoe+iitjWwwy

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa210fc9cfdaf2f78bedc1fff8f04aea_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections