General

  • Target

    b5a7f939b050a5ae678285b263de5377_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b5a7f939b050a5ae678285b263de5377

  • SHA1

    dd347d935d2dd6247596e3ecf68e1a14a1ffedc2

  • SHA256

    701598054914def7365bfe836824609e8d6c01cc2ed610c230f03aad2654924f

  • SHA512

    1ec3c872ce299be5eb4998eea9d18cb6175bf43f3b4b4180681aec062d7edf49f1efe3fe6217a26fc9cdf115397cdc8bbcd2d563e6f852998992395ad264286a

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlz:86SIROiFJiwp0xlrlz

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5a7f939b050a5ae678285b263de5377_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections