General

  • Target

    aa2f5546235df76483ca999e213ba524_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa2f5546235df76483ca999e213ba524

  • SHA1

    4987a8f2b6225cc9332bf22e43836fa90ed7de25

  • SHA256

    59911f09ddf535dbd3b1932c1cdac01e1bab5d304b8c235d7698d94419a1b114

  • SHA512

    7615388a9068e26d4da919ce9e0fdeaca963992b81c50704da5d22077766144983bedc92f9ea81080ea8e30f9288203de8abf2ff57d2bb29ae30722ad172ebfe

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ8:0UzeyQMS4DqodCnoe+iitjWwwY

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa2f5546235df76483ca999e213ba524_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections