General

  • Target

    af785e1aef3b1e47781c766da12ea7d3_JaffaCakes118

  • Size

    2.6MB

  • MD5

    af785e1aef3b1e47781c766da12ea7d3

  • SHA1

    48cc3750aba9a3b2e7c2969ad2c91cac70aef32b

  • SHA256

    600206e8f6457433731c56dad3888dc8154b6a1e3c18e62e1090989cc86368d3

  • SHA512

    a673671ba8b68fabac5bd5ecfb16a9182d8232966243ed2073fafedf234c2c296dcb52ca77d2f0c94a7ce01818d58a20f88664a2e60bb429bb0205a3954fde8d

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlW:86SIROiFJiwp0xlrlW

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af785e1aef3b1e47781c766da12ea7d3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections