General

  • Target

    aa5513437531d936a97967f05fb2ac02_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aa5513437531d936a97967f05fb2ac02

  • SHA1

    fe5097b027a4fe953c779d96649d75c754c64bf5

  • SHA256

    4ab8338f047956104edff4991f5e58dcede6a1ddf16712c7ddf58c9f046c1bb1

  • SHA512

    0c868d9f045b9c261cff3dea54af121f5fa9256dd0c3f0cefd13d3df6d5fff79b702f20f24f6e2fe153e13c26d927d59c4259c28c67e61cf3b2cec08d43eb7eb

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ/:0UzeyQMS4DqodCnoe+iitjWwwz

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa5513437531d936a97967f05fb2ac02_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections