General

  • Target

    ae0fb89e463b805d5dbbd236c75c3077_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ae0fb89e463b805d5dbbd236c75c3077

  • SHA1

    b9e6490c285024576942b24bede5d46fa0bb23a6

  • SHA256

    ba05e0b7fe2dec75f68836c492221e58d0ec15a0e196c1606f7299ceb9be227a

  • SHA512

    3a577638efbeba70133f77379e3ae28256d57d67d1dc40a4a828bfa69dec170fae353c9dd0f0cc8d153e898a3903c8d538f06d6a184deee0f51465bbd432b07e

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlZ:86SIROiFJiwp0xlrlZ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae0fb89e463b805d5dbbd236c75c3077_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections