General

  • Target

    b0f7b41a9cb4f57e1b5ed9db1917b19c_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b0f7b41a9cb4f57e1b5ed9db1917b19c

  • SHA1

    d00d925220554c0a14cd18d3a8267755212c33e1

  • SHA256

    9c615718d72caed47b01a6cfb855bb1d149affc1f46e2acaf7a8f05fafafa4ff

  • SHA512

    48990c4e45f90ff90bef8ce5cc57a7657f9ac06740e8904f515a2448a26a35070781ec8f463ce58037f6d8790fa9895e49fc76bb6c6ea494c17e0b4a463af957

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrll:86SIROiFJiwp0xlrll

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0f7b41a9cb4f57e1b5ed9db1917b19c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections