General

  • Target

    aee96eeef1a642264f0f093b79972473_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aee96eeef1a642264f0f093b79972473

  • SHA1

    76e5fd2220c4e936404b4cca5a72fa1aff9f12ae

  • SHA256

    d489768296b1d28e9258693ed62d9ae47bbe27575925b4b7031906b8f4f1f4f5

  • SHA512

    6c148a3e40bac57f73c4e4e42852fbde317db5e5a48a57fef04e54e57875c0f1367187066fd326e2cd6352bc457dbc54bca03b7e3d66689dfa8a9bf560e11687

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZS:0UzeyQMS4DqodCnoe+iitjWwwW

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aee96eeef1a642264f0f093b79972473_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections