General

  • Target

    c936279370199ec451d152275592f093_JaffaCakes118

  • Size

    2.6MB

  • MD5

    c936279370199ec451d152275592f093

  • SHA1

    bb30e2bbbff9974ebe87cdbf153244f18b53c7d6

  • SHA256

    be2aebcdd3ea323bcff8f15b80577e0860881eecb3090ac97d36b64698854e4c

  • SHA512

    6abe793b6dbd3cf09db05cf70767c4e6dffda4b6e517beaa3a25edb05b6a29269245debe675be163426a905bb9dfb84e9d4949a03da4e9b2f03419f701fc6415

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlY:86SIROiFJiwp0xlrlY

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c936279370199ec451d152275592f093_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections