General

  • Target

    b57c6907a502936819eb33b399f9c9c5_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b57c6907a502936819eb33b399f9c9c5

  • SHA1

    ca1ef45085afa797c2b51936ceb3348f29f71fa8

  • SHA256

    542bbbf3d11fd0044227fcf865829e095f7748a9b1cefaf2595f7bedde7b6bd4

  • SHA512

    83a471a5949f135ce13ce6975b0595135d663e2459e0928144ba77a53aa2c62ea74b243a387a6422c26096f1548af026fba575bfa84a05ad79b6442e3709ea1f

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlU:86SIROiFJiwp0xlrlU

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b57c6907a502936819eb33b399f9c9c5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections