General

  • Target

    bf3d2d85ac8da669d55ffe8e8f8ec600_JaffaCakes118

  • Size

    2.6MB

  • MD5

    bf3d2d85ac8da669d55ffe8e8f8ec600

  • SHA1

    13512fba66479252e78c887427fdbafe0c67ba0a

  • SHA256

    0349135bfa6f9eb9103bff2f6f0e267c3a26f54f86dedbe86f8003dca9ab9917

  • SHA512

    90b43904f2964aec1a87483f2770cfa93ce25303a437894dabdadbdb00faca9e19df770ee9dc2780a271653623d3983d00d2487de2b95570eb53cef134c33c11

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlS:86SIROiFJiwp0xlrlS

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bf3d2d85ac8da669d55ffe8e8f8ec600_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections