General

  • Target

    ab251cc7ea09b4e34cb5e15d5e3afb39_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ab251cc7ea09b4e34cb5e15d5e3afb39

  • SHA1

    0442a08a0c1e3b82a65dc687a68ec478021dc461

  • SHA256

    c1c5f7b83f4818bc7845c9399d8b8ee6423433aca97ba12e3496632d2b08629a

  • SHA512

    3dc32d7f8cd0b12a335edc3520337374bee40996dea2de3c9d18c74844f463a6f759b794ef46c626c189965d25d5380935b2c7c42a12b6380fec32b9075491fd

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlE:86SIROiFJiwp0xlrlE

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab251cc7ea09b4e34cb5e15d5e3afb39_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections