General

  • Target

    3be46543ad5ddb6bb10b0c3671eaef08_JaffaCakes118

  • Size

    2.6MB

  • MD5

    3be46543ad5ddb6bb10b0c3671eaef08

  • SHA1

    d20462505977d495c4b12ce3267fe288b0d3d38a

  • SHA256

    bb734336db6d742fd756368800934e6d0870d11fb7d9577cb71428db5d8ccc06

  • SHA512

    789453537d8894f282179778cb265c4d1c71729aecc9020fcbcb6f6456fc8c1e8c304c79b81106855f6580341fab7981673697ab854d3693c9e5803f2dc971ca

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlI:86SIROiFJiwp0xlrlI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3be46543ad5ddb6bb10b0c3671eaef08_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections