General

  • Target

    6c351047062693410a2e65c1ba3997f8_JaffaCakes118

  • Size

    2.6MB

  • MD5

    6c351047062693410a2e65c1ba3997f8

  • SHA1

    561970ddaaf0b278e3bcf550b632f952eef22470

  • SHA256

    455bb182aa61c0b10e28e09d0d3be3d413a48682ac7102004efd251d4a16fb2e

  • SHA512

    b6a6a2f3860e0620ce7d81237984d7f3d9faaf257f0982fddbca1010d99a58d3561c1523cd7d9b4f25b858f33037c929db23cad2fe332203256e7291e82f8245

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlq:86SIROiFJiwp0xlrlq

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c351047062693410a2e65c1ba3997f8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections