General

  • Target

    7f2163d359bc61b585b3707113b030bc_JaffaCakes118

  • Size

    2.6MB

  • MD5

    7f2163d359bc61b585b3707113b030bc

  • SHA1

    0f53ab31f3a827d13be37dcd01a7011a08efa22e

  • SHA256

    959a7592eec2db74dc69c00e6c53ed167a48c0af63864eb3d9118d1a0aee0be7

  • SHA512

    5ea25bd3ae1691573fc3c45f826cd31495c435ced5da1809c0b0d3d6ab0f82f8d51f56139a30158d1758a0eeaf6cae870326d212595476882b7f5e7b556e3147

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl1:86SIROiFJiwp0xlrl1

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7f2163d359bc61b585b3707113b030bc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections