General

  • Target

    ca67a6e962e7a285baaab084a8958c5f_JaffaCakes118

  • Size

    2.6MB

  • MD5

    ca67a6e962e7a285baaab084a8958c5f

  • SHA1

    d5724695fe61289c55b60b695291d3d69c2efcdc

  • SHA256

    7fe444c3e00ec94a6f5e5d8cc8281e91a72476f5fbd554bb6b8ab4c6fef12434

  • SHA512

    8ef938fdccb3261af80234265a376ba057108ad8684ada253a5e016e21c7b6c54dbabff29abc0c77f043db70ca9bd77cb7f9a4507a7c515a46eb98e9b2793d42

  • SSDEEP

    49152:8coQxSBeKeiOSiFmoJggggLo40KDi3gp0XhCjyrlY:86SIROiFJiwp0xlrlY

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ca67a6e962e7a285baaab084a8958c5f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections