General

  • Target

    be3173eb9dc8cd01a211e1ba65ab39bc_JaffaCakes118

  • Size

    2.6MB

  • MD5

    be3173eb9dc8cd01a211e1ba65ab39bc

  • SHA1

    bbe5406a45971f6677c2e24035ef47c1415d8365

  • SHA256

    5c4dbd7ecda8840bac8abc73393f1f1c19e7d0f3721c0d9e31567e3f017160ed

  • SHA512

    8357838c95592a605cb5f4de2ab9f1f82c259a7ea09782be870997dcb05a07de6a8a353967e487cffae728dc421c81b23396aa515c179eacec6f7875e33dce87

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlq:86SIROiFJiwp0xlrlq

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be3173eb9dc8cd01a211e1ba65ab39bc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections