General

  • Target

    a7c7728bb0f58b54d12d8851e7692977_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a7c7728bb0f58b54d12d8851e7692977

  • SHA1

    df05ea69ca71f5357b002c0e3665ba5d0841e967

  • SHA256

    1a81d04fb7a018e0b54a80847d4a3d64c47d830e1c69feea05992f3f38f5ef41

  • SHA512

    9c17d962f671b7632491a7b5bcf98b328723b1e9093f4526ad4d84446a79d4abcf2ead5f6fb5d5f4d9ac66d2e2ac1d72bdb446aca23b08453ce61d50e760b1a2

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlt:86SIROiFJiwp0xlrlt

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a7c7728bb0f58b54d12d8851e7692977_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections