General

  • Target

    afb524bea83e5addff0ccdce193c6cda_JaffaCakes118

  • Size

    2.6MB

  • MD5

    afb524bea83e5addff0ccdce193c6cda

  • SHA1

    f46761522886034eacc8b4689c16b118d88fa3d9

  • SHA256

    98af960a0d550945c346a6903853f06041d5b14a922ecaacd5e3c8b8140c7bc3

  • SHA512

    d7a9ee0dc7fb36fa661ebc2d71b6afe10b4a344ebfe01038685a489ed4d8c07124396a75584bf3e22272a56c5497c31ddc603a5aef1f93778ade6994b1151076

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl2:86SIROiFJiwp0xlrl2

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • afb524bea83e5addff0ccdce193c6cda_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections