General

  • Target

    aa36a8801975a5ec7305efa79501c92e_JaffaCakes118

  • Size

    2.6MB

  • MD5

    aa36a8801975a5ec7305efa79501c92e

  • SHA1

    e641607afa8c29ce7c0022e5e3eaf68866f6c2f3

  • SHA256

    34029907e0086e68756be97146df99ae034a92746c21d98000ae11fde141307c

  • SHA512

    070d753bf43287171525f68c2a7dc16e3a0a73d466f91362a112b70077b6eb0f495972367abcec1cf7e58863e594b4147cb4a7353f1f9cd20542c028efb6954d

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlx:86SIROiFJiwp0xlrlx

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa36a8801975a5ec7305efa79501c92e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections