General

  • Target

    aeea02471d1f78bb4c6414fcc48530a2_JaffaCakes118

  • Size

    2.2MB

  • MD5

    aeea02471d1f78bb4c6414fcc48530a2

  • SHA1

    2c31a92dea0996198742e49b95ae281b1434970e

  • SHA256

    cc3b4d307ff4d444179526ca49f8593d198807e0956c707968daa250363c456b

  • SHA512

    1896e0b4198d3069013907a0b76a26855ebd39ac5ff118271830f1a3c1e1b20ea867ecb92cafb760569c8b34162e71c18e8a35a6522a176151fa238cf5919d89

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ3:0UzeyQMS4DqodCnoe+iitjWwwb

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aeea02471d1f78bb4c6414fcc48530a2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections