General

  • Target

    b66ad19fb2a4d564517e0233b2878310_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b66ad19fb2a4d564517e0233b2878310

  • SHA1

    3e434a2396ad38c93d978c21a91a1ce58d99cd96

  • SHA256

    0a2e5ecdc67cd8c92f168790953e8af4d26a97f62b8a270934e37b699803a8f0

  • SHA512

    f49b2efc5aa6cc397a18099654b90fc87e8bf56cc10f251f17375b61fc0cde0a264e2efda4aaab9aa5e3b32a164cbbc99bb751957f191a23b6c362013d6677b7

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl3:86SIROiFJiwp0xlrl3

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b66ad19fb2a4d564517e0233b2878310_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections