General

  • Target

    0c5ea2c4f5c3a6f8c9c53ad8c713c445_JaffaCakes118

  • Size

    2.6MB

  • MD5

    0c5ea2c4f5c3a6f8c9c53ad8c713c445

  • SHA1

    4b5a784170e26ebd89487357285a7987d063cc98

  • SHA256

    2bf98262f28310aa14c7c40244e5ac88155cdeb127c658381cfcc102381e7fb6

  • SHA512

    826594300e33e44d54f03ce183ecd7bd8f31d7778d90d91afa4b55b76a91e17199495474eda6124117725fcb67066f106100fe815780e6706bfb291c71144905

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlo:86SIROiFJiwp0xlrlo

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c5ea2c4f5c3a6f8c9c53ad8c713c445_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections