General

  • Target

    a7a780545e51dd23e6ed13df86838b13_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a7a780545e51dd23e6ed13df86838b13

  • SHA1

    bca6f561dee3d57dc8657405fbf9f5e2ec230c48

  • SHA256

    1b719366f599cb8066d91ae8d592ea70db645ca1418c08cd1e35402703879fc4

  • SHA512

    be819c51af01c429459768bc38acf30f613ca1acfba58ae194402a221ab4c23cfbf619a7ab5ed908adcf1ad45f073d5d601e4af7f48b50751dbd90349fa0c0ce

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlo:86SIROiFJiwp0xlrlo

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a7a780545e51dd23e6ed13df86838b13_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections