General

  • Target

    03a8eb02f6297f68a283f10ffcd7f497_JaffaCakes118

  • Size

    2.6MB

  • MD5

    03a8eb02f6297f68a283f10ffcd7f497

  • SHA1

    24795dcb502f5063578d6e295b054beb285a393b

  • SHA256

    ebd92dc2489ffcccd5b6abe8d440570730362de2eeb91075791b3410a203e0c7

  • SHA512

    a19cd4a01485682bba534b7e382d987c155709f6cf828f4d56d8ec3e59ad6002e7cc46c982c8dd32cc93c7be6399cd5e25eca60e12f076ff198045f779117cf3

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl5:86SIROiFJiwp0xlrl5

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 03a8eb02f6297f68a283f10ffcd7f497_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections