General

  • Target

    be7487e2686f7f0a821c7a4f29bbbb44_JaffaCakes118

  • Size

    2.6MB

  • MD5

    be7487e2686f7f0a821c7a4f29bbbb44

  • SHA1

    5ec71919222fe47ca3122141a30895dad1725c6f

  • SHA256

    d3a4ae3c992cfcfd30f4bd192c88a0bf19071dca04972464a89fc9fe814d3137

  • SHA512

    549ab4d96d5a7678235e824400c52181cdc5bc16f88e63d2eecd357d5bab933183d99e639dc3d0072720083ec8ab80089c513fdd5f6f7a6d7142251ed3c8c5a8

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlZ:86SIROiFJiwp0xlrlZ

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be7487e2686f7f0a821c7a4f29bbbb44_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections