General

  • Target

    0a058fe0d52b8c31ced0563360d1daec_JaffaCakes118

  • Size

    2.6MB

  • MD5

    0a058fe0d52b8c31ced0563360d1daec

  • SHA1

    e983de19ce836caea0f42b974a28a7cdd12b14ba

  • SHA256

    f99360e01d7ded5d236e7e5a8de35d9573678ba9ab7d98faa5c4092381b923d3

  • SHA512

    ac146aa9d4300cd92cf986b54495f11f75b37e44a0d558b209739878da088fa3f5855c0ac0d56f84f653ac9f0b8c6bcbf2683a0315543925580e2db970a149b6

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlN:86SIROiFJiwp0xlrlN

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a058fe0d52b8c31ced0563360d1daec_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections