General

  • Target

    bf1426b0d54e45b4736328922229f519_JaffaCakes118

  • Size

    2.6MB

  • MD5

    bf1426b0d54e45b4736328922229f519

  • SHA1

    2bfb283460a993dd70415e5a16762b013c8efcac

  • SHA256

    fc64b234e4783d2a5b6fbeb32d0074f58b2dd4376e28485c3996e0e138bee396

  • SHA512

    431461920e6b283ddcc850411f0d91914c5fcc742bff988f43829b32aea67a35d9dca74859403eedb6765bb7ad5fab91522aa777c6dcc880126c08cac79aca5b

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlh:86SIROiFJiwp0xlrlh

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bf1426b0d54e45b4736328922229f519_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections