General

  • Target

    c28414f66b3762da0899fc9b704477e2_JaffaCakes118

  • Size

    2.6MB

  • MD5

    c28414f66b3762da0899fc9b704477e2

  • SHA1

    0ac7d3a5a7933da7dcbcc0b8ff3e80be70fe9e0e

  • SHA256

    937c256ca0e01e6c7ee1e51ceac47be28dd24d0563c742b45139a8ec9f0c9d58

  • SHA512

    a9eadcea09320bd0f71d50bede379937651da1e3209998a0a57c86f2cb010d0ef85e63c197574da171cda06cd0a7cebe37e0ef3649f1803a9f65c5e84bca599f

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrl4:86SIROiFJiwp0xlrl4

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c28414f66b3762da0899fc9b704477e2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections