General

  • Target

    86c28d51b2c1d5ad46c238d2c76041ffJaffaCakes118

  • Size

    2.2MB

  • MD5

    86c28d51b2c1d5ad46c238d2c76041ff

  • SHA1

    3a1c981eb9e0f92c85b25d7f2771de48d4a158aa

  • SHA256

    b0945a210c7514c381606e9f82a37ecfe84bf7792040edb978035c8a22bd3660

  • SHA512

    6c82cc392161bb31db531a52d1bc3d6489e835aff2b9b5edf55ec16d4659563b15e0b528f45b40e52864fad09cc524ff5d0df49bf03801038cdb09f4df7ee8c9

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZ8:0UzeyQMS4DqodCnoe+iitjWwwQ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 86c28d51b2c1d5ad46c238d2c76041ffJaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections