General

  • Target

    a7b3b26d203573905daf20f9eb1cb2a6_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a7b3b26d203573905daf20f9eb1cb2a6

  • SHA1

    09ae09a8b844014d0dcaa218f552d0e4fc819120

  • SHA256

    40f9363006a4d917ba77b7b1f2c7903b54fcf74038023601b6f665b4a7c6047c

  • SHA512

    248cc9a2d119b82ebcbe36dfdc17289c72cfb8ed277e439b7ecd1e4dcaa79e8fa74e096bf28bd941b7485608b33ddd771481d8e3d4614975dd36f474fd421a84

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlv:86SIROiFJiwp0xlrlv

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a7b3b26d203573905daf20f9eb1cb2a6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections