General

  • Target

    acd13b00f56601676eef1b31c0c0c01f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    acd13b00f56601676eef1b31c0c0c01f

  • SHA1

    ce12ace7c7df30b585ebf42b4e700ae602b7b4dd

  • SHA256

    fddb7201468f5474e362af6abf789101fe8f905375adbdfc8cd58fe201fec0de

  • SHA512

    56bbb1a55b97c6e59149bb2dc98c45cca12282e5f49eb27dcd0b32fecff5bb744f9405ef992309e632045097dde79df4186eaf30c8234acae0517bca108d5c42

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZO:0UzeyQMS4DqodCnoe+iitjWww6

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • acd13b00f56601676eef1b31c0c0c01f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections