General

  • Target

    c0d165f0ef61950ddc36a9a90eafc21a_JaffaCakes118

  • Size

    2.6MB

  • MD5

    c0d165f0ef61950ddc36a9a90eafc21a

  • SHA1

    01e44b9b7a131e4a92400c790a83f96b1dfc7a2a

  • SHA256

    8aabe4bd50ddbc9d101cd118bed296433044ad9e871212fec8d7faec7d9b8039

  • SHA512

    b93a78dad7f092712ba205f3c2f3e19dac0695be9c6843219b45cd2e9270838883fc4bd26ce53ae6caa1ae9a2fd4e8e1dc44882af1af2e53e63af00fc7152e62

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlk:86SIROiFJiwp0xlrlk

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0d165f0ef61950ddc36a9a90eafc21a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections