General

  • Target

    acd144949cefc03fc58bdfcc86468a27_JaffaCakes118

  • Size

    2.6MB

  • MD5

    acd144949cefc03fc58bdfcc86468a27

  • SHA1

    8e9a708a727280063090dc33541ec3dcc6acfa3a

  • SHA256

    88fed79c5e3a7ef67b5be60a3c7ffee5a18dc8876ffe4b2f84d82912b08f3f9e

  • SHA512

    549bb08eb31c24187f23d1619769da5a4fcef3a87d470a195a29f2073b8993360c16a3d0c42afa11a1eee03b339aca02a70df3c1f090acf03091f01168e83da4

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlC:86SIROiFJiwp0xlrlC

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • acd144949cefc03fc58bdfcc86468a27_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections