General

  • Target

    a57a2d3c3394959a9ba4302111ad2207_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a57a2d3c3394959a9ba4302111ad2207

  • SHA1

    f26ee6382a008486f2906ba04d4ab7313bd5bea6

  • SHA256

    fe3e47a87a6a5b62fb2e61dac424911b0a6657b21e0610bcaaffc566b8d00136

  • SHA512

    b37180441d5a86f26911d33f37849aa4063ff7f17961177c22b56159282fa207c856a3984af9f9b31f4f235f619544bc6d02d7429b0c15b981e7e66dacdf8288

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlT:86SIROiFJiwp0xlrlT

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a57a2d3c3394959a9ba4302111ad2207_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections