General

  • Target

    015cb87f9f8248e53624019a7d79cfb7_JaffaCakes118

  • Size

    2.6MB

  • MD5

    015cb87f9f8248e53624019a7d79cfb7

  • SHA1

    82fbe6fef57760afe83bc5db0eea42952612959a

  • SHA256

    890ced9191a18061898ed0f418503f8714babc11b88f50aedd6a6c55873d7939

  • SHA512

    8c122160a55ebdde7b3cee0ad59e9c2ddf835eb667f467df0fcc1cf4f2a702ebd963600472efe7ea3e23394cf0edbe3a9a430c49e8304de8381c290195c12fdd

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlH:86SIROiFJiwp0xlrlH

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 015cb87f9f8248e53624019a7d79cfb7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections