General

  • Target

    ae47d10fd178b40bb66c727b072a2384_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ae47d10fd178b40bb66c727b072a2384

  • SHA1

    5bb58ede29a51ace1eb1cbb1a3a05fcdee630946

  • SHA256

    bb43da4b9ff98a84f8c5d9835c7dc32da0512248f0d9591dc810063f210a3da5

  • SHA512

    c5455025ed73f469b3da4d7d3a9c353e918ec2e57ff9b12395ef9c60b88ef5dbfb0ae3a44c3dc27e5ba262f588e15a66bfa436ffb7a2d952f4aa84e937e8077a

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlB:86SIROiFJiwp0xlrlB

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae47d10fd178b40bb66c727b072a2384_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections