General

  • Target

    b70cd34dd21e15d82fab52bcb737aced_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b70cd34dd21e15d82fab52bcb737aced

  • SHA1

    d3d8b0facdb15f009f5a2fc5c8a5406cfc93bc7d

  • SHA256

    86de831e155e27c6281999bff642794e904276286310ca2a3eb954d50c6208d0

  • SHA512

    ed2673ed1dc3f117c91e842d8405a4697cfed2bd2a8412d284a34e2244c5d3a2847e961b9c4e03a0d9c2487bee708b56371992063038df0f43465d66f0cef4f7

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl6:86SIROiFJiwp0xlrl6

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b70cd34dd21e15d82fab52bcb737aced_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections