General

  • Target

    a7237471d2e78e27a875e758de49a3e7_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a7237471d2e78e27a875e758de49a3e7

  • SHA1

    02ef93c906fa98a942c55db8401ae5368ed1a1ec

  • SHA256

    7365ffbf8be0cd736ddd39fb9da2a4fdc975b66ca38c9d1a4202a96527b1e139

  • SHA512

    1b567bc20b03f854cd3b5c222d8b57fcd759b50dfced2b118b7b3c3038cca4352fad0e41517dc776b22518dff77d6934e86cf1d7cf21d0d02cbb0419e7e47775

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlu:86SIROiFJiwp0xlrlu

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a7237471d2e78e27a875e758de49a3e7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections