General

  • Target

    ad917fd53d6b0b0e471960fc0c32d86f_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ad917fd53d6b0b0e471960fc0c32d86f

  • SHA1

    62e34491fbc8e74bd5e4e92010ed421bf4c6d8d1

  • SHA256

    a46aa67071cc661808276b79ca79b08e7e66ee5006978f13aa01656da33a9b65

  • SHA512

    a5986c1f8e67735e2bd41e4d7e137d61b41cec4a532b25ce0067fdca3589fb917dc7f9ec0f992e366332c7cf268de01f56054e577df90486e6195b8744ab09f1

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZt:0UzeyQMS4DqodCnoe+iitjWwwx

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad917fd53d6b0b0e471960fc0c32d86f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections