General

  • Target

    aa7be0907a51cf3a60d88dd27a7328bc_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa7be0907a51cf3a60d88dd27a7328bc

  • SHA1

    4cce73fefa60c3f856bb3df7512fcf7934bd3c71

  • SHA256

    1cbbc961de5fd5785ac23e1e7c34afb9c4a5458bc3b9fd27692c9c81f3b4a13a

  • SHA512

    ac5122f1ce346dd976378053988f162a00bdd0f07b0b62f369f98bb53c3c96a205d67b2c44c37bcf6947e24fe6052088c27051b5824a8291d9d4b666b2497659

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZS:0UzeyQMS4DqodCnoe+iitjWwwG

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa7be0907a51cf3a60d88dd27a7328bc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections