General

  • Target

    ae24f6e6fc4334273ff5efcf0869c33b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ae24f6e6fc4334273ff5efcf0869c33b

  • SHA1

    fa1f0c247f86e1827034a00c80c8e64ea8f734cd

  • SHA256

    f546140444b27bd1bb889bf3518b5ad7762062400753448660c18c942faf9835

  • SHA512

    f445e69bdebdd681f5bd5f2e5e53d0c6ffefd19675bfc1037737095fa1931292266447bfe1b3bac04c837fbcbaea5f4eaa2954c945d2a8c085fd404bb7915879

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlB:86SIROiFJiwp0xlrlB

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae24f6e6fc4334273ff5efcf0869c33b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections