General

  • Target

    ab45d6d753e24cdc25838e9519a1983b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ab45d6d753e24cdc25838e9519a1983b

  • SHA1

    bdd847b881232518146b232e8d6b48f933bc4d79

  • SHA256

    ac5460a61dcd2fe8590ffc4d494b9761828da52f6f81e6265a58a2f581619392

  • SHA512

    71fa2c5907844f3bd84e9a7ab44528095d85c409d38e227dc38c7b0a432992df9cd2d5b89556f896611c42304b4e8fbc18f90da5d25a33acd65cf589c143221d

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlp:86SIROiFJiwp0xlrlp

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab45d6d753e24cdc25838e9519a1983b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections