General

  • Target

    beca72d7ccaa256eec4e98a39b289675_JaffaCakes118

  • Size

    2.6MB

  • MD5

    beca72d7ccaa256eec4e98a39b289675

  • SHA1

    2fb65c2cafee4308f59fc689d505e8c0cc63e8b1

  • SHA256

    c676ca663c6377162d15ea0231712a13822cbce4c01305acf01e9e69eee1b4ae

  • SHA512

    bb121bc9eead7423f2b3ca3ba97d0e87c2f38e12be5dd3144c290163fb93d67e2bbe4587a2b42a2d314e6ce444e6beef595a0bcddd5b9522d2d2ecf5bfe67d60

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl/:86SIROiFJiwp0xlrl/

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • beca72d7ccaa256eec4e98a39b289675_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections