General

  • Target

    affa9acab3c32a29de2cb87ac82b4191_JaffaCakes118

  • Size

    2.2MB

  • MD5

    affa9acab3c32a29de2cb87ac82b4191

  • SHA1

    3a0167f084af6980ee04068a774f1373d275ad27

  • SHA256

    17eea0d09a6ec4b8ac5c004231a45f64f8cfc3fd9dfcf1e576abc541ded2e9d9

  • SHA512

    e4b2a3cc45b933c4a732574b2048dfcaf14b448847c55ab7a88807cb88378d5d9cbe14d33deb0e52c831174c586b117f926db5606d9b872a8b36bff2c5458c7d

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZz:0UzeyQMS4DqodCnoe+iitjWww/

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • affa9acab3c32a29de2cb87ac82b4191_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections