General

  • Target

    646457daf0dcff62087dea312e858942_JaffaCakes118

  • Size

    2.6MB

  • MD5

    646457daf0dcff62087dea312e858942

  • SHA1

    2462dba1e6dc18c79c190131ef0373595afdb6ca

  • SHA256

    f8d18a8b859c7f0ce3c6e6276d560fe95f2c4374cc7be20afcf5f493de3260cc

  • SHA512

    3c481b02f5ff43ec3b6f54c4b3d26e63930c4bbb2bd9c32d376f1f14b97f62b6c6807f740e3d096b490fc221b77fc74f369c9877b62c1272e06b5720ad0678cc

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlO:86SIROiFJiwp0xlrlO

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 646457daf0dcff62087dea312e858942_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections