General

  • Target

    b86700409195709d7915f42e07db27a5_JaffaCakes118

  • Size

    2.6MB

  • MD5

    b86700409195709d7915f42e07db27a5

  • SHA1

    423c496f9a743f3b358be9f7d1106d9664dc2030

  • SHA256

    065ab389769034b3885c6f1fdf06e2416fe4802bb2c5279a41db6722730eab65

  • SHA512

    b542c3cd01b99c76977cb38814bb9bb5f67780ca40c009c0f97d5e53e2131c5f275cf21e69309f17316b42263f6b835ad48fcd954b7259a5f5798797d4a641a8

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlL:86SIROiFJiwp0xlrlL

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b86700409195709d7915f42e07db27a5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections