General

  • Target

    4a2c795ef6865667a1b583f77fdac406_JaffaCakes118

  • Size

    2.6MB

  • MD5

    4a2c795ef6865667a1b583f77fdac406

  • SHA1

    d4ea9cf95e1da1d47d26413711e9196ecfa5f89f

  • SHA256

    6dd805ce266b7849c2160fc7aecefa919c03a1462be4c507091215d2ac063f35

  • SHA512

    fc952f50e37e471f093c074e9a42623829c344b4de0a4fd5b3844bc67bbb8580d7f62873990ae781cb44139a70dd2577493552c77f8cb1918bf31670e256121d

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlG:86SIROiFJiwp0xlrlG

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a2c795ef6865667a1b583f77fdac406_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections