General

  • Target

    7551fd16240f13686678a92295c54f3b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    7551fd16240f13686678a92295c54f3b

  • SHA1

    0a28a02fcadb689b47fbf16449e8c654c9712422

  • SHA256

    cd543b6b56ac8b6cc24f1c5d251318c42fbabc92a5fa89e3e336dec37f251a95

  • SHA512

    dbc68c958ced4f6423dec018b5605cf0d50261c35deddd6e92333349cdfeb587006d251a08bc427cd274b5182f81363dce495c20bcc979f7b8a1624deaea26bf

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl9:86SIROiFJiwp0xlrl9

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7551fd16240f13686678a92295c54f3b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections