General

  • Target

    333ee48bbbbaac2785293c8a67beac98_JaffaCakes118

  • Size

    2.6MB

  • MD5

    333ee48bbbbaac2785293c8a67beac98

  • SHA1

    9dcebba348ddea043f2b3e708685e53863279039

  • SHA256

    356a7dff15668868bb65081374e31302f2ed76d85d78357592e73edfd096b847

  • SHA512

    411bbb02d281884242bb2a8ab054d63fbd7d52a1edbd07fff38a4104e65dd03d211521883549138442356ae6d41067f89027006cfd1c89a053b70afb17da4620

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrle:86SIROiFJiwp0xlrle

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 333ee48bbbbaac2785293c8a67beac98_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections