General

  • Target

    337abc0622f0b91c40332ee912b83c12_JaffaCakes118

  • Size

    2.6MB

  • MD5

    337abc0622f0b91c40332ee912b83c12

  • SHA1

    105eaef13c8dc1d743ce3c9e310d5c4bfdfe9a67

  • SHA256

    aa1a4cf6a2c40ef95050caeb1da871b9b95d08d936214c1616302dcff343bfdc

  • SHA512

    cfc709f5e80ae8123856d7abdd6f9abd64fd72e8ebdc2f1ede3d3322c18148bca4358733a3419b0539f80070761593acb557791fd8d80a948e9cde98fa792c35

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrly:86SIROiFJiwp0xlrly

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 337abc0622f0b91c40332ee912b83c12_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections