General

  • Target

    88d259e26dcdedaf3b1b240c21a7360a_JaffaCakes118

  • Size

    2.6MB

  • MD5

    88d259e26dcdedaf3b1b240c21a7360a

  • SHA1

    ebbb1d303c7f43de2435f2d85b8522bab2b3dd55

  • SHA256

    4ca2157916ec3b95a696bf999f9a3a3fa74b099b3779b24498686af6a73ed7e3

  • SHA512

    38a88d17f10815e8bb9dc4531640c50026f0a656e22157859a1e28a7b50bf6f0a15fa3879796c6b6a2fdc93d4c26264657abf40310904b0b4244adf89e88c739

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlm:86SIROiFJiwp0xlrlm

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 88d259e26dcdedaf3b1b240c21a7360a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections