General

  • Target

    019ede3f90937e539c4fc7411a071753_JaffaCakes118

  • Size

    2.6MB

  • MD5

    019ede3f90937e539c4fc7411a071753

  • SHA1

    1a63bb637a88b8a326efdfd0b685b719656a539d

  • SHA256

    30420fe5e29e6648db8c87725121ffb290abdbecd7e8b2aa39ed8cf44d7edbc8

  • SHA512

    a04dde26bce8d24aead1c6a2f9e184a62cbba34a94eccc0623e0041fe01b4b842990dabc0b07a29598c26ccb1d35848781c91385ed0d9947e10251e61cf5f6d7

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlX:86SIROiFJiwp0xlrlX

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 019ede3f90937e539c4fc7411a071753_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections