General

  • Target

    aa792e925b7f25adbcc30e45ebba1914_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa792e925b7f25adbcc30e45ebba1914

  • SHA1

    84135eae3adf27e3ef824ce132fdd55e6a5656ba

  • SHA256

    55a2679df9d2b58f212e1cc29e929e8b356a03b5e1263ae0abc363e0bb100641

  • SHA512

    b3fec9582151c185c64eef6daeadef8e5aa7ab200ca4b4dff7fe3a7035fb0e036f81e58bd2e6b06a04e572f143220de33887e421d3b981b16e5d5cff80fcc259

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZU:0UzeyQMS4DqodCnoe+iitjWwww

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa792e925b7f25adbcc30e45ebba1914_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections