General

  • Target

    2873f7eecc12145df1e2ae00d9d5dce5_JaffaCakes118

  • Size

    2.6MB

  • MD5

    2873f7eecc12145df1e2ae00d9d5dce5

  • SHA1

    8569c31e1d75e198f5527adf6e62d585f96fddb0

  • SHA256

    1e213549bae363fc9b9b5e42868f29d46633707b41e37bfb5735641c3f5b892b

  • SHA512

    e4e1572b3a00a24be83a0aa1be7265ea6ba4120b09f6d5d14d77f6cba6dc7129427f5c99658ca9bfc7dec2ec18dbc555bd42e9392a6c29a423f68b673f56b095

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlI:86SIROiFJiwp0xlrlI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2873f7eecc12145df1e2ae00d9d5dce5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections