General

  • Target

    4bafe86eee6c7f85854864e6d6fd95be_JaffaCakes118

  • Size

    2.6MB

  • MD5

    4bafe86eee6c7f85854864e6d6fd95be

  • SHA1

    77365409087e2449f5a1643fc207521886b73cdd

  • SHA256

    ac0a4245b6a6ad920fa59e4843cb1f9161faf45b6844c9c6ddb5a7961afad562

  • SHA512

    98c297f4a0818721a0cbed9468167cec7cf2ec07fae7bfe10e6ff09870b1584f31472f4014291ea6cebeecf305114e10c38b59dcc8658527308f0fa1254042f6

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlu:86SIROiFJiwp0xlrlu

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4bafe86eee6c7f85854864e6d6fd95be_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections