General

  • Target

    aa4c2cc3594030ee518698b94e21f48f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa4c2cc3594030ee518698b94e21f48f

  • SHA1

    81ee71847849fc8635e34229a5ecaf9ef180f8a8

  • SHA256

    693b47a3e450bb962d0e717895323d353a103ba10cb50435a2f50cd6d2e6b54b

  • SHA512

    5125d9e41d7a34acb8797642d13f24f507f7a70e7b84826996f8092936a09e3b7cb7eb036278b0571a231d7b99b57d89ddba1e48a17daeffb30f659522e3aa62

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ7:0UzeyQMS4DqodCnoe+iitjWwwX

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa4c2cc3594030ee518698b94e21f48f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections