General

  • Target

    8e41821021a74da16cc680c51fd6ebef_JaffaCakes118

  • Size

    2.6MB

  • MD5

    8e41821021a74da16cc680c51fd6ebef

  • SHA1

    06b5f2e0bda2cbe83fff30a9fe1a7e6603cb952f

  • SHA256

    b4e54163417c6f2c556f748f5923e3fb55422ae8b0f6520a484d3a6520ba16c9

  • SHA512

    8a633fa16887bc78816103078620d75b930d59f3c394de81794a8469b5faa746cdda8f1b274ea77d4e6c6876fa589f33b9cefa00918a1c313f892b577a73c483

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl8:86SIROiFJiwp0xlrl8

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e41821021a74da16cc680c51fd6ebef_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections