General

  • Target

    ad2120d943b5f6a1cc27a0c84218aa75_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ad2120d943b5f6a1cc27a0c84218aa75

  • SHA1

    54a035e1e791435f0380eff360d02a9da27a85db

  • SHA256

    a671883cd181246dc324c89e7653775dc39c9679ed48cf4627cf569d58feff5b

  • SHA512

    e02202952e9feb74a5bfea72f712060cbaf7beb3308ee4145af6e32d879c528a12a175c88539bb8b3e2d5fc07f5fda2d03877df8b64f41ee2f74bc790c1a02d2

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlM:86SIROiFJiwp0xlrlM

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad2120d943b5f6a1cc27a0c84218aa75_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections