General

  • Target

    be1d14a428222bbd694ec06f801851ef_JaffaCakes118

  • Size

    2.6MB

  • MD5

    be1d14a428222bbd694ec06f801851ef

  • SHA1

    809509c816cc037eca74da5870b0f5fbf53aa5ea

  • SHA256

    86860e46e11355465ee2abfcdffad884ce79b1e60ff420b937ce0a9a5ab01f9c

  • SHA512

    68be87ed28e97ecf5c506a42e38444ec32f11728e9e6c8f3535f2313b3cf1c729f2ca6865d389329b6ebaac3d8ace5242160def8e00eff9e59131c5ff27a816e

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlL:86SIROiFJiwp0xlrlL

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be1d14a428222bbd694ec06f801851ef_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections