General

  • Target

    b6f1779557e666c69db54f01aa537153_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b6f1779557e666c69db54f01aa537153

  • SHA1

    2c5fd5b279660205382c6b12e810c0e3becaa431

  • SHA256

    385a71219a87a925a9c4867e773ebfd49ef6f82d8c1606ba3747785f85121709

  • SHA512

    346a72c7670b389c05bb381af74755d765d2f9ae009cee092fd08551d8fe3b7cc8b318ea82e0eab697fded79e278150f815e06dd3037843f51004ea469c2e8cb

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlE:86SIROiFJiwp0xlrlE

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b6f1779557e666c69db54f01aa537153_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections