General

  • Target

    aabf0d47f539847e3bd747ca9c82c0dd_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aabf0d47f539847e3bd747ca9c82c0dd

  • SHA1

    f5f5060ffaf1e0ed62f2c457dfcf9f2890f09be1

  • SHA256

    3b89606887b4a1730eb64b33cdd5c55f1e7be26a64d46bc0fd4231527e88caa9

  • SHA512

    271634487bc790a59c9945f44780dac1c6f32cdf1f3a7f25294c96ec86302c69cb632aee7d91e968d98a3a4794c492e79db3a1def6133c9e60684605ce5f274f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZO:0UzeyQMS4DqodCnoe+iitjWwwi

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aabf0d47f539847e3bd747ca9c82c0dd_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections