General

  • Target

    af87b5269cb232233e5fc73eb1aba934_JaffaCakes118

  • Size

    2.2MB

  • MD5

    af87b5269cb232233e5fc73eb1aba934

  • SHA1

    ffbab5226acea41232bfbffd920d00bd4b4fd470

  • SHA256

    d35f0e909ecc8309b2ba87d36710e12f57ccb425dd90fd5df1d924fc0336009d

  • SHA512

    590fd39ac77c0f4a37323cdafc51428eca709d676f8b9f0e71262848462030b54800a203eef0d0846e13bb249b75696cdff0c032cbb42153269a2b0e72c63094

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZn:0UzeyQMS4DqodCnoe+iitjWww7

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af87b5269cb232233e5fc73eb1aba934_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections