General

  • Target

    614d9c9b4554071fe5b7cd9eb4790f59JaffaCakes118

  • Size

    2.6MB

  • MD5

    614d9c9b4554071fe5b7cd9eb4790f59

  • SHA1

    72b0d67f6456ea3f54af66acf47a8311d8cb1602

  • SHA256

    d95a11120e7eb4666c95ee614046ad0e0f7e9e671b96106db831b5f45b0dccb3

  • SHA512

    e5efd1a8b2cf4d02ff1ec2b1fd82dec7e9329673d70e189804043e1be88db3d033d6459e6f64b12366720f629ef8cdadf84409e34ba367ee94ce678423b7963a

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlb:86SIROiFJiwp0xlrlb

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 614d9c9b4554071fe5b7cd9eb4790f59JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections