General

  • Target

    ae4ae2e758317bcbd5b571166cae8e48_JaffaCakes118

  • Size

    2.2MB

  • MD5

    ae4ae2e758317bcbd5b571166cae8e48

  • SHA1

    3c956dc89164653093b75e4c69fd1d5583d744e1

  • SHA256

    a8fe3130b2c58baa158f2939c86a0eeb67efb1664172f55a3d1f2a1ef4bd3004

  • SHA512

    17db4c82a4cfd99951c7e519716cde45f24c4122c35b7b3a66a6e09b2888c10419140316c37266c4b7b031803ef4daf505ac7bda215e2810198b5c52f7211ac3

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZJ:0UzeyQMS4DqodCnoe+iitjWww9

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae4ae2e758317bcbd5b571166cae8e48_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections