General

  • Target

    a8936f0030e491389eac7e04e2edea5b_JaffaCakes118

  • Size

    2.6MB

  • MD5

    a8936f0030e491389eac7e04e2edea5b

  • SHA1

    c73924655611fde0d9de810c91b64eb4cd9572f4

  • SHA256

    a37ba5844edcc3b1d072227322c13c6b1ff3359f5bc15ef9dd47f6f088a9aed2

  • SHA512

    35a97f079667ab6f50bde1d720ffe56897562ceeaaa0117fe08e77a55073a2fbc6ce4ca835470bd6f6705a7783b3f6ecaa24f04d0a7bcddf7c78d60bae6adab4

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlj:86SIROiFJiwp0xlrlj

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a8936f0030e491389eac7e04e2edea5b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections