General

  • Target

    a0a6c2c1cfebce965028d5de9176d338_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a0a6c2c1cfebce965028d5de9176d338

  • SHA1

    d7a9fbf1480ae0d37910587374ce940a8417df80

  • SHA256

    2f79b1ea676d17cd440e811972c07aa0535b0cccd5ce2e085ae41a2fbd12355f

  • SHA512

    3a065dc4f2941e6d4198977bd9699cd3114b0587965d182d07194145a1f5e3640251e4cb3b81826d5872cc39d4b52854a7aaba237c0c0fa8f6f9a5908f063dc8

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlN:86SIROiFJiwp0xlrlN

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0a6c2c1cfebce965028d5de9176d338_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections