General

  • Target

    44c35a3431018c6a03553bf3d3ccbda4_JaffaCakes118

  • Size

    2.6MB

  • MD5

    44c35a3431018c6a03553bf3d3ccbda4

  • SHA1

    a6c5bee1e00bc5fd81247b29babcf3cdad7f4a3b

  • SHA256

    b45dfc727e16a9ba5d3606e310562668480043b1f82116cefea418b5636bb82d

  • SHA512

    274abe2a0d78b188d21c0a01ea00b4a5491926f5d27952e67d73f3e3f180958c7dac7501bd8026cc051ba2a04f719518966019fbf0ba982d7b625964a91384cb

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlH:86SIROiFJiwp0xlrlH

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44c35a3431018c6a03553bf3d3ccbda4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections