General

  • Target

    8d6cf18a5c8cb2ea538cc9294e6c658c_JaffaCakes118

  • Size

    2.6MB

  • MD5

    8d6cf18a5c8cb2ea538cc9294e6c658c

  • SHA1

    2b370e3ad2a284c3db5a1813d828d13cf69df79e

  • SHA256

    92a9529f48905c7cef605f519d17980e68f8e0778b83e260ee30b750abf7a560

  • SHA512

    aa369afdb6b2fd9ec13742d5111e0052a439fa9a19301f94dd94502b4ad77e7902f38b44458addce12b7169d3aa7e0d07815fe5a052ff6b34e32811c64a92987

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlg:86SIROiFJiwp0xlrlg

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d6cf18a5c8cb2ea538cc9294e6c658c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections