General

  • Target

    4d031e24b6af2da3a19b96d0ae148c31_JaffaCakes118

  • Size

    2.6MB

  • MD5

    4d031e24b6af2da3a19b96d0ae148c31

  • SHA1

    5b85916611e90a1b5094f0aa8f5b8a9ca661439e

  • SHA256

    f41c8417ac6d75b64cc013bbae12110d81d15ede1174d9d00c92a5026501f037

  • SHA512

    6f129a4541b0bf3ea90b6df860319f6c4fa366906c2ae3d2362d19379a3f1a8e6b94762a6f22210cf51a508cccb98bdf41962d9c3ac8d7c9ff40146e21ee1139

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrle:86SIROiFJiwp0xlrle

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d031e24b6af2da3a19b96d0ae148c31_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections