General

  • Target

    b802ef3907feacef13bc26da535ddde1_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b802ef3907feacef13bc26da535ddde1

  • SHA1

    2d5320c15a0a9f4ae0848794732256603a80e4ca

  • SHA256

    733f6d0e21eaa58fe4bf14e847e3eaa47f9be1efc962bb57ad6ecec80776a676

  • SHA512

    722f905acf6c3197c952f065931c5574396f876ae72a7609d7a319bb62d75d00f2cc467e06f6a4fcaaac7506f5e43298d290afd4638c7eb40765b1eb2ad15c2f

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlf:86SIROiFJiwp0xlrlf

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b802ef3907feacef13bc26da535ddde1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections