General

  • Target

    b2c61504aab5a5f4e8d2d05d47ce363d_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b2c61504aab5a5f4e8d2d05d47ce363d

  • SHA1

    e2d48030affead12c4ab8be8efb9678096cef07a

  • SHA256

    98e49dc2cee2ed8a44e21d1258d571f6bf88996ff38fe60daf6194aeaff12213

  • SHA512

    71e34de2392e56b9df359dc4e7003b2dd1be9110e16ef888466c661b7ea0e066620097f3350a604edf2ba793fb8159779f34dc507c77c81668bc72b9eec3bbda

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrli:86SIROiFJiwp0xlrli

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2c61504aab5a5f4e8d2d05d47ce363d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections