General

  • Target

    b6cf353e1ee9a45d2d1d200a5f240329_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b6cf353e1ee9a45d2d1d200a5f240329

  • SHA1

    5ff92746e16b8d290844cdf4b663f447608c2029

  • SHA256

    d9a35300e4c744daed09d6229def45fb37cbc6b650ca240fefcb03d02c237c52

  • SHA512

    0922dada699a49a7ded188334c926060eb5500d0d21a55c470f8ceec7a62077f46708e1e38b635594251c8c2ad31ae37693a0f2af98a2ed2edf7974b4574cb65

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlX:86SIROiFJiwp0xlrlX

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b6cf353e1ee9a45d2d1d200a5f240329_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections