General

  • Target

    ed1dbfe2ab4bbc27c674687625b05a81_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ed1dbfe2ab4bbc27c674687625b05a81

  • SHA1

    aaa587bfea4849c4b6ee84fb9b824c4db7a234e8

  • SHA256

    0a69ad4a8840f337da104bab8c96d8fb0f4d9b89f3586802ab9f41ea858cc0e8

  • SHA512

    2131c5611880047f7e4809d3ec88885bdf71c785ba24d4138287270601d0bb279caa6abbf555c1ab2010dcfd6befe0058bdad2f9ceadb617c83e73f881d85ed9

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrly:86SIROiFJiwp0xlrly

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ed1dbfe2ab4bbc27c674687625b05a81_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections