General

  • Target

    94e9386018f31bb91898cd1c569fb2ec_JaffaCakes118

  • Size

    2.6MB

  • MD5

    94e9386018f31bb91898cd1c569fb2ec

  • SHA1

    8f6353b79ad04e778229d7d4c916591ab76e5d8a

  • SHA256

    793cdc288fb53c6ce673635414657e1fad1dcce1528749882eb45b406850892a

  • SHA512

    6e5205ba4a20517253641639bd682ae1e956f38adfc05fb501ab67813ac21b35a53d7c42b208fba019a6377015f471450e9e8858bd68a5d3481282300b4a7de8

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl6:86SIROiFJiwp0xlrl6

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94e9386018f31bb91898cd1c569fb2ec_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections