General

  • Target

    aa4cfb5165647965385fc09175118053_JaffaCakes118

  • Size

    2.6MB

  • MD5

    aa4cfb5165647965385fc09175118053

  • SHA1

    78b3838ab36ba3df94143c1568d9573ee7602cd2

  • SHA256

    fc7c9757610423eef39651d23275a647756c4fff21a187d95997851b8b346b8c

  • SHA512

    c8a7c1d07ba6ab3534d27fbdc5fb8b8f5e20bedfbb8422f83b2d168b0222bc7a7f1f01de82738ad7ce4cefc2e4daf961c9b9283a55966fd6998afda999f2a7fc

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlL:86SIROiFJiwp0xlrlL

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa4cfb5165647965385fc09175118053_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections