General

  • Target

    023783b9aa475a2c10fb7f3395b6d83e_JaffaCakes118

  • Size

    2.6MB

  • MD5

    023783b9aa475a2c10fb7f3395b6d83e

  • SHA1

    18975a4301944b80aeb64c94621bd4bfde74fa80

  • SHA256

    7c92e49710b9191f7f11b6a67f2efdb1e42b265da8f8432dd99fa551abb2ff6c

  • SHA512

    bc59b8d94f2ef84b4b7a3e2dea431653ad974914a5de6a7901752a8de9e138f81214208a2add585ae622aa94ccad85e6def2e09f3adc0da831e263b20e046ec4

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlz:86SIROiFJiwp0xlrlz

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 023783b9aa475a2c10fb7f3395b6d83e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections