General

  • Target

    1123088915909ac2959ae9f8c599aa94_JaffaCakes118

  • Size

    2.6MB

  • MD5

    1123088915909ac2959ae9f8c599aa94

  • SHA1

    76f928bc8d54c5519960b0a02740d3e8f154b6cc

  • SHA256

    9fbcd587c8af9fa74965794824fbc681a8f4c7e8747e28a05904c76fa12e00ff

  • SHA512

    8a1d93c940915214646f171e9d0ba261c8fe3cee0d7e850d8afc2aae7ba592df1f2f6bc922204365b1d4d7f112f3edf3705be1b8118f152b7e2aafa9a7e3a3da

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrle:86SIROiFJiwp0xlrle

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1123088915909ac2959ae9f8c599aa94_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections