General

  • Target

    af3e930778f001bde41cce184af672ac_JaffaCakes118

  • Size

    2.6MB

  • MD5

    af3e930778f001bde41cce184af672ac

  • SHA1

    b8bce674a9dcad16b95074b13b3484d05ee3d731

  • SHA256

    7ff92848993b171405a1bd744e7f87007a6bec4ce610c501a94dc199f52fa8fb

  • SHA512

    c05551db2469425f1d05fbd1b13bec9c902824825f528513ef8d48e9ef5cc43deb88b0eeec753cf54486946280b56d4355ca36ffdc01610df8f2d2f92dc7b67c

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlf:86SIROiFJiwp0xlrlf

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af3e930778f001bde41cce184af672ac_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections