General

  • Target

    ac80867a99790d61469218992318367b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ac80867a99790d61469218992318367b

  • SHA1

    ad74e42d86836b0553afa04417823c806ea4cd5f

  • SHA256

    07a4deca5ef3301829536a458bac371be5601031b865ad700c20630117ef527c

  • SHA512

    a5e5e43b731e3dc7acee55f65482eda670cecfd59a3ad94a76097f2389a10e505d1c4cbe34b361b5b90c3c36647fe93bbcea449c6545990cebadac619f94d7f3

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlC:86SIROiFJiwp0xlrlC

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac80867a99790d61469218992318367b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections