General

  • Target

    a150ee3b296019b0b69372e5479fa928_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a150ee3b296019b0b69372e5479fa928

  • SHA1

    327dc6e0566f287168e1a150edde9d8d0dd6415c

  • SHA256

    9ac61cc93a8e051a8a2fe7549a4bb75a6922baf867a28a5e6a6c51e18a5dadd7

  • SHA512

    e9ffc291da5dc70838f2a0554462fce9f76466ee1bcd99a3184c42dd824f671b50b6db34fb0c5fd59a6af2bf92c6318429b469edf3f504a7fe9c36d5588296cc

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl0:86SIROiFJiwp0xlrl0

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a150ee3b296019b0b69372e5479fa928_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections