General

  • Target

    ad57560c13a2f92f591d746064f9caef_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ad57560c13a2f92f591d746064f9caef

  • SHA1

    75fb65738f21617b4220ad399518551a8e8e0788

  • SHA256

    46ace233254fa1f62702017e43fb2cbc51c7caae805761417800b671325ca5ed

  • SHA512

    7754e075c50a53e263221347c37984d3d3fec0f6410b678061da7c858a763045a1299bca7082844c29e81e804e86cd9a226fab3ed5b18beea2e5409f3424c2ba

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrln:86SIROiFJiwp0xlrln

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad57560c13a2f92f591d746064f9caef_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections