General

  • Target

    a612915336ef24eeffeced828f309a3e_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a612915336ef24eeffeced828f309a3e

  • SHA1

    4dde30440d1b97fd6d65f1ccea8c5a7cb4b2177f

  • SHA256

    0f3729fed54b77529f67f5e1fa51aaf2e87a3ff47977afcae5f23477b9976df8

  • SHA512

    a7a4a752fe636d8c562c8500f80768ac464a2729b33e2117cf771bdc3796344621d327f7c2455335e26b488b3852eb7c0c1fbb6111620e8b87b1538198a7a2a0

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrln:86SIROiFJiwp0xlrln

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a612915336ef24eeffeced828f309a3e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections