General

  • Target

    0d5f5151a10075596b4166e9e898e056_JaffaCakes118

  • Size

    2.6MB

  • MD5

    0d5f5151a10075596b4166e9e898e056

  • SHA1

    b72ebed76f7097662e4322b6a531adb328af0be1

  • SHA256

    a6d4f664d2387b6a1f9d454ed87646e10ceffb5b655544e126b716344546723f

  • SHA512

    4158203eaf0becdc1511633a9c1a3b41b8cf380976b8b7a905df10468ea29da2736b28cfc2bec5f5f1799fda79b2befcf444c7bcae0eb3276ac453ba188c8e68

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlZ:86SIROiFJiwp0xlrlZ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d5f5151a10075596b4166e9e898e056_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections