General

  • Target

    b56a1c28464e16a7d6790b9d4481127c_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b56a1c28464e16a7d6790b9d4481127c

  • SHA1

    11d88a1fdc31881d69a49a834d1d2c733ca11387

  • SHA256

    935190dbc95b6d2142fd37d8b6080e4014817efe1a8e1699b6381d8548456d4e

  • SHA512

    ae08acce1e87f8d4c9b0b409e0ec670df9851ff54ec677982499e1731cb81fea528e06fedf767ea3522a934459a023e0beeb72a0d02a46740d720d6049ec4f8b

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlu:86SIROiFJiwp0xlrlu

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b56a1c28464e16a7d6790b9d4481127c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections