General

  • Target

    acf8522fa3b551df2de1d4d2de2dc4b3_JaffaCakes118

  • Size

    2.6MB

  • MD5

    acf8522fa3b551df2de1d4d2de2dc4b3

  • SHA1

    1fa4d548ceb5cd8cc7c63f50ddc08643b987c54d

  • SHA256

    d36bae79df11e26fc59ca6d2278740dcd29841a8458980db5fa894d026537a91

  • SHA512

    fe7f452b4418b419080f23ea687b526443489de37e5596d44b06def3bce28150f5a966649d26018b7f3b0b0056057ee4da8e16d858a1da4adb347df088304a62

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrll:86SIROiFJiwp0xlrll

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • acf8522fa3b551df2de1d4d2de2dc4b3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections