General

  • Target

    2677fb9446327ce8a6c4de4136560567_JaffaCakes118

  • Size

    2.6MB

  • MD5

    2677fb9446327ce8a6c4de4136560567

  • SHA1

    2503556821c1802268d14447db9acda61bfca192

  • SHA256

    acb00a2e7230c3d623b8dde0cc8e90e3cd9c98feaa0f7f514873c3e4f77eb47d

  • SHA512

    494227bedc80b7f861c65a0fe1bb635549f31f31e549354ac30d6b722b68179823bd05afa92308a3428449bbeb1800afc017533381098b6904fa80f0093d0ce8

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrla:86SIROiFJiwp0xlrla

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2677fb9446327ce8a6c4de4136560567_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections