General

  • Target

    aaee055f74a43e693aad17c6317d4566_JaffaCakes118

  • Size

    2.6MB

  • MD5

    aaee055f74a43e693aad17c6317d4566

  • SHA1

    ccdf23aa3e9492caa91e41347b625747c95fb3aa

  • SHA256

    cb0afc89983ac261c8bcb151470f5b50e9ea5fd22190f1b10e5258bb37e931ef

  • SHA512

    b77d289d2aade8aa3791c1e58f8599f5038364ace58e917e4840b04c419d6a4b20bbe0033325555659db96f0fa829a75ff2674d3491eced1ab233d2062a91b22

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlu:86SIROiFJiwp0xlrlu

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aaee055f74a43e693aad17c6317d4566_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections