General

  • Target

    b2cbe0dbb2348db0ec251f0927c27ab9_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b2cbe0dbb2348db0ec251f0927c27ab9

  • SHA1

    d4b0d4a489b82500f6aa92b10abd1e32fe832e19

  • SHA256

    410d9f169e48dc856692c5ce4a328818e5d31ab014e201c2e1662ced96bb3944

  • SHA512

    70f2cac78cd85fe76b8e8fed7c3a4e817997f89745229a030b4acbfdb8781e65225017f34ad84957baf5968c434da02e6531d304e230fa5b761cee2e96f228db

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlS:86SIROiFJiwp0xlrlS

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2cbe0dbb2348db0ec251f0927c27ab9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections