General

  • Target

    b4795d22089e7b3b73fe20337ac23286_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b4795d22089e7b3b73fe20337ac23286

  • SHA1

    95e6144575e3a3f3b307517539472b421e999008

  • SHA256

    234f52bf24a295800806e62ad59168214f586cc43284ea763ddb862ebe762fb4

  • SHA512

    5d178edf75f76b8e4956c7c60262a8edec6be3ae8371de7f0857f1276f87a7e406873e5d69beb5f455036bc1428966ef9ca2944ab5a20c7c9809d0044ae0d47d

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlJ:86SIROiFJiwp0xlrlJ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b4795d22089e7b3b73fe20337ac23286_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections