General

  • Target

    ab3b22e206d0928018d76e1d81a64372_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ab3b22e206d0928018d76e1d81a64372

  • SHA1

    8a65242b740d5894c47919649f925a0779fd148a

  • SHA256

    4501bd127987ab00cb3971a50f828bd3b966d5ffd727fa09854b4c1139bfa471

  • SHA512

    490254fe766fac235b6062547893906ac028c4b29f2f3b94fa8e5cbb46b0db9f91de1d70414e5a02d0ce0761608ee25d2348963f91de6de329295fb29f3ab4a9

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlH:86SIROiFJiwp0xlrlH

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab3b22e206d0928018d76e1d81a64372_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections