General

  • Target

    b58f5903cf3e56b2ec68e803ce3fb377_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b58f5903cf3e56b2ec68e803ce3fb377

  • SHA1

    ac78fea61950e45257129ddcc9c18a16067053ac

  • SHA256

    3e9d17cc37bddde14d653d4a70bd99055ff77ed50b90bf8849b8319998d352ce

  • SHA512

    485974914dc01a3915d29bc32103eb80873c5f35274328d42bd952287b1e75afc18deb63cdc8fafe983615f1d58546dfea2fa6927babfa6b9f3ce07cb7759b5f

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlE:86SIROiFJiwp0xlrlE

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b58f5903cf3e56b2ec68e803ce3fb377_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections