General

  • Target

    ab56d98521a812927e30f571099327e0_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ab56d98521a812927e30f571099327e0

  • SHA1

    afae6c0cb1709802ec0f91e6a472d2e6f4b5d75c

  • SHA256

    0793a2a148cd4f30053ca3a986e44a537b90d9598d9eacc108b029a6632d2ced

  • SHA512

    48b52a81753e4043a45f0d968fde3071830a457a18aecc75b7b345d8fbf5fc22bcb53d43de4082109b77338fe0eae3fd518ce9024cc0956f4a3ae671943ce1fc

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ0:0UzeyQMS4DqodCnoe+iitjWww4

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab56d98521a812927e30f571099327e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections