General

  • Target

    3b4fa141155a6392b36253858d0ab9f2_JaffaCakes118

  • Size

    2.6MB

  • MD5

    3b4fa141155a6392b36253858d0ab9f2

  • SHA1

    49119224766ba1e8efcbf54b4d413a5a463af44c

  • SHA256

    196514f9a64a3a73933056443cccdd720f02436464eec64e8f2fb5a8a65200c1

  • SHA512

    06e0cc5fd81e75f7b3178b405052962433a2352189b13173f5d8ad1ff94e355b61d394d2663359d1a7ccf2808d7bd5d58a86c0a13c313ac96d6830d22672f910

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl7:86SIROiFJiwp0xlrl7

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b4fa141155a6392b36253858d0ab9f2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections