General

  • Target

    5e7e3d282953a5e1428374346de95daaJaffaCakes118

  • Size

    2.6MB

  • MD5

    5e7e3d282953a5e1428374346de95daa

  • SHA1

    dcebcf7eec2ff12e9883d5230c592d4b310d878d

  • SHA256

    40498f5560905b12c159a26427e204e4d0b6f14cb15ad4407f04602314a89057

  • SHA512

    16f98acc84af0c4ba64fd478482db469e5184d7a09d76792fc398591731693625c30edb0586795f69f3119234dcb848ab3ac6786839565ea7ed91fbe31f3f354

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlh:86SIROiFJiwp0xlrlh

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e7e3d282953a5e1428374346de95daaJaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections