General

  • Target

    34337bd4f087bca5336244a015590c64_JaffaCakes118

  • Size

    2.6MB

  • MD5

    34337bd4f087bca5336244a015590c64

  • SHA1

    065dad01a78fddedf8d62ee4c4df0e294f3100ba

  • SHA256

    5712f2aa42d1f8d646166258f542b539c50848e75d8164a371bf65044e64c309

  • SHA512

    c896cfa4acd029296b12676103d05b535ad920b48559e25b36b5bdf91b7c85d620a3afc14418b2e22575dc4d6b03e94d458751a285ff48009810fc72020570f0

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlw:86SIROiFJiwp0xlrlw

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 34337bd4f087bca5336244a015590c64_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections