General

  • Target

    43ad8605ae17ef1c2027f93182c5c27c_JaffaCakes118

  • Size

    2.6MB

  • MD5

    43ad8605ae17ef1c2027f93182c5c27c

  • SHA1

    bb86c7df93faa845a41868175235659d7e90cb06

  • SHA256

    472d19a89682a8d41a520c8f2a425b76c7943518063d29ce732b9bd235a49bf8

  • SHA512

    4bd3342ab73a3f94c7a1fbe99f8516c6986ad11bee0942441ec6ab3045a1f11b3ddbc9da75813580796e472ca2236780b26b67872950f7db359b044494a0568e

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlX:86SIROiFJiwp0xlrlX

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43ad8605ae17ef1c2027f93182c5c27c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections