General

  • Target

    783dce01685a119f8d228a028034bd9e_JaffaCakes118

  • Size

    2.6MB

  • MD5

    783dce01685a119f8d228a028034bd9e

  • SHA1

    a03c6f94021917b3b85d763b435f26631db02a38

  • SHA256

    e87ee8fb500facf4af3aefb17ce4d46e94f0b2c99e5eac9a39587a04156cce85

  • SHA512

    cb8c1530f662464383de0e0826dfea022f377328f80f765767cb95903607acec011575284272d3be9288567886b3bb4efa10122d7c20f2140b448a0286fdec07

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrll:86SIROiFJiwp0xlrll

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 783dce01685a119f8d228a028034bd9e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections