General

  • Target

    b56558e4c7fd175ea098309e76e1ba13_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b56558e4c7fd175ea098309e76e1ba13

  • SHA1

    5a00091d12c0f98dc93db6ad76404483651bd4b0

  • SHA256

    07fa4631019845e9b5bf20513213fd98ea54e465f7a8b94781932cb51d945a51

  • SHA512

    3178c213131bb59727b5e7322333e9b21b174ae9b147890d96fcee79563792490f508b990bbf62c4fc1f507f62323297a54528c8e7367729ddb66f977cbae61b

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlZ:86SIROiFJiwp0xlrlZ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b56558e4c7fd175ea098309e76e1ba13_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections