General

  • Target

    090bc2279480243e8c7493e82f7217df_JaffaCakes118

  • Size

    2.6MB

  • MD5

    090bc2279480243e8c7493e82f7217df

  • SHA1

    d4b8df2c295362f8d5672697be5610d64f8b9e20

  • SHA256

    1db99e27ad2ea914922b13a0441d9f7d2f4e661697d5af228c874f906e38c28d

  • SHA512

    1fff5f359e32ec894fa3a25ec58f9eab830ca787dbaad030fe8f0e7598ab2b51301d96ba1f3c6dd0b04fc3a8b67e9de6e28c827768e2931b102cc8674c6f91b2

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl7:86SIROiFJiwp0xlrl7

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 090bc2279480243e8c7493e82f7217df_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections