General

  • Target

    9c53a953eb632f7c4610c134850ade5b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    9c53a953eb632f7c4610c134850ade5b

  • SHA1

    28dba7c8338c361982b28fdd92206362c551837a

  • SHA256

    51ff213932074fe224b478a8945d1ecf7e68d8c6fa11a4a902f22fe9b2471135

  • SHA512

    0915107249744271de96a3015e20d1e2763c03390b20a23c9104a43451066be3611bdb4b1e9e65a4d34fb162fb318d8cbaf0462ef41e24739f176736ca9b4885

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlU:86SIROiFJiwp0xlrlU

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c53a953eb632f7c4610c134850ade5b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections