General

  • Target

    ae633df76e2835ab9ee5598c8402c0d5_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ae633df76e2835ab9ee5598c8402c0d5

  • SHA1

    81b89b7bb3c78c92da8ce1f99e3baf4b66bc8122

  • SHA256

    68fce42adc0a08def924857be6f66aea930922cd8a9d09ac0d128d4754b3f96d

  • SHA512

    b408fca1690b823900fb3b5cbb688974d653eadcde04d2b484f02fae29cab04463c1e2c6ff5d3af05a26123fae31fd082ed8e70461979734f0dcf7f5915b86d7

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlL:86SIROiFJiwp0xlrlL

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae633df76e2835ab9ee5598c8402c0d5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections