General

  • Target

    4f26f6dd546626b434dc0d8da063935e_JaffaCakes118

  • Size

    2.6MB

  • MD5

    4f26f6dd546626b434dc0d8da063935e

  • SHA1

    fef476b0f38b4004da82c8a54200082c137e3f84

  • SHA256

    32057c56de58a12bdb9b60ee33d1c121b20d9d0ebca4a25faf19407c9a498427

  • SHA512

    4db3f232d9d868dc47b62084d4319266c1b89b8a5c29dafb9f7eeb420c732b7edda5125d6f9a8e2ccd1f780f9d4e427ec235aff713ba7c70c9e44bfe69debabf

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlB:86SIROiFJiwp0xlrlB

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f26f6dd546626b434dc0d8da063935e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections