General

  • Target

    a5de5da0e26495c38dc216d1c44cf61d_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a5de5da0e26495c38dc216d1c44cf61d

  • SHA1

    e919752b2be932e8eeae05dd3a60c696780a1d42

  • SHA256

    5b0eb4181bb19ee021210552103132f6370b9df88a9d186b798f86bac471ad61

  • SHA512

    ed42ec033bda27effd0548f28f9dd396eeac482dd9f99f6ce07a5c2864420b55d11de7da0e9efcdd0c99c6150cb34a8ab4cedd0218470a0e83df3ab9acbf0a6f

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlk:86SIROiFJiwp0xlrlk

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a5de5da0e26495c38dc216d1c44cf61d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections