General

  • Target

    27766007c03d1242150caa41316e5430_JaffaCakes118

  • Size

    2.6MB

  • MD5

    27766007c03d1242150caa41316e5430

  • SHA1

    dbccbbeb46b78e780fae6728fb7b789441dde12d

  • SHA256

    b2cb209ad60a4bde9f3ab19da62bcbea4df0f5c695d752f2e0f7b3fe62206041

  • SHA512

    5a7fcbf09ec0df89dedb41e013c9201759729fc0bd51f5f456d9efff26758da5c6cdc90716c9d2444ec443f2a229f04fa799365b769ce0180bf769e7bf627720

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlN:86SIROiFJiwp0xlrlN

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27766007c03d1242150caa41316e5430_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections