General

  • Target

    652b33e00a5b67d66346ae7f7427a24d_JaffaCakes118

  • Size

    2.6MB

  • MD5

    652b33e00a5b67d66346ae7f7427a24d

  • SHA1

    d6cf40826612469e6bed921195c2bcbfbcdeca04

  • SHA256

    3a7522e06122d392c13a3e49416b5e2ecb5fb526c8e00f0afdcd1252386ae450

  • SHA512

    cca38d6d27886bc284dae077da2bfca96ebd9ac04bbf31c843fc4640af870ba496e52b858cf829480d7c068fba5a39458335d7f32a88085a2e2d396388833324

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlc:86SIROiFJiwp0xlrlc

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 652b33e00a5b67d66346ae7f7427a24d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections