General

  • Target

    b7123a261571d0571ea9d2b381acaf16_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b7123a261571d0571ea9d2b381acaf16

  • SHA1

    8f56dcb8bfcab0c93abfada522fc7af401b1bdf0

  • SHA256

    45c0408d9e31d1143e0617b12dd6dd49b41f2cf5ebe1acd4ecf1c36562f5978f

  • SHA512

    0ac4378849cd03187897192eed54decf044c9402627c35fe8f987eae9e699f4393277bb8ed17f3d0d427035943d58151c046592c2a4d83680a946b55cce6163e

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlI:86SIROiFJiwp0xlrlI

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7123a261571d0571ea9d2b381acaf16_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections