General

  • Target

    12582ff985650d879bff2bd35af0b7b5_JaffaCakes118

  • Size

    2.6MB

  • MD5

    12582ff985650d879bff2bd35af0b7b5

  • SHA1

    99973c0c08d5d93ed41df9879e6858921a92c9df

  • SHA256

    672d51f3e777a6d4316d9512971e974b2e7d9b3f8712a9c65192e3fc2ef4a7e0

  • SHA512

    3b4b500faf10e0ea2e51981431439bf76ff03f08eda67ea3de5b761cda1d4cec7b3a6fc22b19c42c584fd67d657f3d976d4d34ab97f8276a5390451c8a50d46a

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlP:86SIROiFJiwp0xlrlP

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 12582ff985650d879bff2bd35af0b7b5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections