General

  • Target

    ad7c3c68aafb0dbc0eb76900724b94d6_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ad7c3c68aafb0dbc0eb76900724b94d6

  • SHA1

    e6f64009f5aa2c2ad5ccd3fcfacc0d07349aabb0

  • SHA256

    9bd46f9c06c3d8330354612f37e59a510de4680140a3db9ca18c8e6679751f8d

  • SHA512

    3d0a5fbb05dfc324b6e95d697b1be1088275065ca2f72b05cdc6d8e4ff8dd2bc51d720e06e42f5dd1f82d726d8ae36ae92a73db9f6a03799c31a40a284be4fd8

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl1:86SIROiFJiwp0xlrl1

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad7c3c68aafb0dbc0eb76900724b94d6_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections