General

  • Target

    82d4fea3ca2fbea5116a15114a518dca_JaffaCakes118

  • Size

    2.6MB

  • MD5

    82d4fea3ca2fbea5116a15114a518dca

  • SHA1

    5072b48a59a62aa3c56d257564b919f41c08748c

  • SHA256

    d983efd2aba8df24fbe0300a05dd844be6af54e3b877c7f2f50b56868ef14298

  • SHA512

    ba557bb7fb2c6477c2bc69c074db9f89279db2a2fc767d01bc6a123cdbc12ee572d3a39ecf7b3e77eb782c3c46aaff5be978c0a6a8b7905f9eac8cad6a10bb8b

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrla:86SIROiFJiwp0xlrla

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 82d4fea3ca2fbea5116a15114a518dca_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections