General

  • Target

    3fd7e26510ef489c3ec6ec106bc02566_JaffaCakes118

  • Size

    2.6MB

  • MD5

    3fd7e26510ef489c3ec6ec106bc02566

  • SHA1

    d9b97b1951b850373afec2072500ee960cdee9c3

  • SHA256

    467dd8c5fc7a676d8faa78d41c7194d91c2270693855160765172eb08541bae9

  • SHA512

    7a3f2dee4dc3bf80ba9033e2a76566b83402d9449eeb98e9e26e86d9c3167afd82c13d0d5f3db0cd177149135a54ac6212d13d469021cfa2360b645a0b767809

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlk:86SIROiFJiwp0xlrlk

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3fd7e26510ef489c3ec6ec106bc02566_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections