General

  • Target

    aeb26b9bef14d427a084c4f8f9240e98_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aeb26b9bef14d427a084c4f8f9240e98

  • SHA1

    85c4690a126d1dc539e3bf854a38de3059725b5d

  • SHA256

    671f6d57efbb4280106562d780ac40ed524209c2b12b78d9e98440a072340384

  • SHA512

    60e4a044c1f331d479fdd899c3acccfd8caf888f93e49c8858bc4a0ffe0556e034002e88cbb42a437b60607ad545f59013ce8f98d29f292d319057940daacab5

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZu:0UzeyQMS4DqodCnoe+iitjWwwS

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aeb26b9bef14d427a084c4f8f9240e98_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections