General

  • Target

    ac4713ba91a3aff0992291cc02a523a0_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ac4713ba91a3aff0992291cc02a523a0

  • SHA1

    1292b53c705f87a0c0be87b08c1223590ae90b8b

  • SHA256

    42804069269fb80a909af3d5c79f8177437a5ba461bb6f55382974a8274378b5

  • SHA512

    0fa9047ceeea192f34e60b446ec18d43550a8964a0873103eab1e388ff5150a8f1e4e91638188be39ae4d35b76f6f4d9e60be66e90954720d993dd7ecfa49d4f

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZe:0UzeyQMS4DqodCnoe+iitjWwwa

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac4713ba91a3aff0992291cc02a523a0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections