General

  • Target

    498868562c6e71db958e84c175df23fa_JaffaCakes118

  • Size

    2.6MB

  • MD5

    498868562c6e71db958e84c175df23fa

  • SHA1

    c8319e16c8a5c5cc76ae8df37348b0956e9904fe

  • SHA256

    6677829904745964752e7015a1a58180b81873ee83592892ca5f329f5fcfc097

  • SHA512

    c435bdc5765b81f7905cdb34870587ec0e831ee2cb10f3db20f1a80a823089f0c9a916dfd420dbda5c6777e417f4844c4589d6080e9db58a9d455433224bf8ab

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrls:86SIROiFJiwp0xlrls

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 498868562c6e71db958e84c175df23fa_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections