General

  • Target

    6db0d6af0d8ad9adfef4294638519375_JaffaCakes118

  • Size

    2.6MB

  • MD5

    6db0d6af0d8ad9adfef4294638519375

  • SHA1

    df78238d5476dc69ed7cdfc7c09e1b54e1cf7785

  • SHA256

    6b2afa46941b84ea2f609b52c3d4856e7415049d6e34ba6e4986d950978d874b

  • SHA512

    6eff71b81c9ca2cf7b5a7b7609903c93fe71ee125cbe28c624f86f2c0033f7312493b1ef9ff6f53616e9f572862bb438be6aa8c67905a5c49bd0724a3a2cc293

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlp:86SIROiFJiwp0xlrlp

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6db0d6af0d8ad9adfef4294638519375_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections