General

  • Target

    af2154f07db58ae033a41890e1aa8da9_JaffaCakes118

  • Size

    2.2MB

  • MD5

    af2154f07db58ae033a41890e1aa8da9

  • SHA1

    0fdad59967e92e759243337cd6d5bf159da388fc

  • SHA256

    d64a3060ba4806a3a82d8c325406811a3e879c30a172a4b2c2d7af0e84bed8dd

  • SHA512

    0f1484a875458d83cf7d1815b7ff56c12fac104f41966ca038bec0ab917fc38157f76d3cca5aead48f50a90afa5d88399a7fa089c2381fc3c9833b57c4c53e79

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZv:0UzeyQMS4DqodCnoe+iitjWwwT

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af2154f07db58ae033a41890e1aa8da9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections