General

  • Target

    967457be4e17d0ad76c4b488fc60e1e4_JaffaCakes118

  • Size

    2.6MB

  • MD5

    967457be4e17d0ad76c4b488fc60e1e4

  • SHA1

    b2594aa4ec873645f8afa689dcb3c7adb1a4b0df

  • SHA256

    d0bedc5e91cb88779e052a95ca7d04075de7ba3a40802b0eae9579f4f8bc32cc

  • SHA512

    2ec30fc312b32da6d9326ece5bee18dbf2f335995334bfeda0f9e01e1efc8aa765afb40e878715fa4b5f0f0e3ad914c057ada84fe6c67edcbeaaf2266d8929e3

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlO:86SIROiFJiwp0xlrlO

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 967457be4e17d0ad76c4b488fc60e1e4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections