General

  • Target

    0d109887278c005ce6a1a0ddee2cb908_JaffaCakes118

  • Size

    2.6MB

  • MD5

    0d109887278c005ce6a1a0ddee2cb908

  • SHA1

    7bf671473aae2fd5f7adbad619c0aee28fa39f99

  • SHA256

    63978f9cf47bc46bfc043525093496d55f70e856e9fda168c3edc0c49df1520d

  • SHA512

    07ef81d85943becb2b7fd61d927b875fcf8f7254adafb90f34d9f043c155253387650f4f35b40485a3984824119c52d7767e1d32d5a18cbd4f35ed8d32f11787

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlB:86SIROiFJiwp0xlrlB

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d109887278c005ce6a1a0ddee2cb908_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections