General

  • Target

    c81b925208cfd29aec83166d7fc2105f_JaffaCakes118

  • Size

    2.6MB

  • MD5

    c81b925208cfd29aec83166d7fc2105f

  • SHA1

    0f52f384c7ee9f947266c9c0bd6e87e8d0e1a98b

  • SHA256

    2c79d50ccfd5d4f36d4f4eff1cf23b5fe6d22d6ec9bfa691c645b1d7e3b9e3c5

  • SHA512

    ba2fbdf4d83c5770a3f3d0502e7221abeddf0cd25b11f3f19076938b451bd292c420c17e0bd2a143eee282669309060c051b46258b5f138768e27e0f825f560f

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlR:86SIROiFJiwp0xlrlR

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c81b925208cfd29aec83166d7fc2105f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections